CVE-2021-3629

Name of the Vulnerable Software and Affected Versions Undertow versions prior to 2.0.40.Final Undertow versions prior to 2.2.11.Final

Description A flaw was found in Undertow, related to a potential security issue in flow control handling by the browser over HTTP/2, which may cause overhead or a denial of service in the server. The highest threat from this issue is availability.

Recommendations For Undertow versions prior to 2.0.40.Final, update to version 2.0.40.Final or later. For Undertow versions prior to 2.2.11.Final, update to version 2.2.11.Final or later.