Publish GHSA-33hj-rcmx-86mv

Author: advisory-database[bot]

advisories/github-reviewed/2026/01/GHSA-33hj-rcmx-86mv/GHSA-33hj-rcmx-86mv.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-33hj-rcmx-86mv",
-  "modified": "2026-02-01T18:07:04Z",
+  "modified": "2026-02-25T20:20:29Z",
   "published": "2026-01-30T15:31:14Z",
   "aliases": [
     "CVE-2024-4027"
@@ -27,6 +27,47 @@
             {
               "introduced": "0"
             },
+            {
+              "fixed": "2.2.39.Final"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "io.undertow:undertow-core"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "2.4.0.Alpha1"
+            },
+            {
+              "fixed": "2.4.0.Beta1"
+            }
+          ]
+        }
+      ],
+      "versions": [
+        "2.4.0.Alpha1"
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "io.undertow:undertow-core"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "2.3.0.Alpha1"
+            },
             {
               "fixed": "2.3.21.Final"
             }
@@ -40,10 +81,34 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4027"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/undertow-io/undertow/pull/1860"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/undertow-io/undertow/pull/1882"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/undertow-io/undertow/pull/1894"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/undertow-io/undertow/commit/6b7c18481ce65ae4012d92fe2b7f17a21ef4d70b"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/undertow-io/undertow/commit/8318dd36fdc2c9842baf10c5f1bfbb3bc23f75e7"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/undertow-io/undertow/commit/cb854c779b9e2368c3c274ebd7217c8e75d505be"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/undertow-io/undertow/commit/fb14baa51b611a4a9f755f1d8b07d6e12eac68e3"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2024-4027"
@@ -56,10 +121,18 @@
       "type": "PACKAGE",
       "url": "https://github.com/undertow-io/undertow"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/undertow-io/undertow/releases/tag/2.2.39.Final"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/undertow-io/undertow/releases/tag/2.3.21.Final"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/undertow-io/undertow/releases/tag/2.4.0.Beta1"
+    },
     {
       "type": "WEB",
       "url": "https://issues.redhat.com/browse/UNDERTOW-2377"