GHSA-356w-cx4r-75hvHighCVSS 7.5

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint...

Published
August 11, 2026
Last Modified
August 12, 2026

🔗 CVE IDs covered (1)

📋 Description

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket handshake.

🔗 References (5)