Threats tagged 'ghsa-fhmg-q5fc-2m8v'

A vulnerability in EAP's Undertow HTTP/1.1 chunked-transfer decoder allows unauthenticated attackers to cause an OutOfMemory error by exploiting missing limits on size and count. This results in a denial of service by stopping all deployments on the listener. The issue is tracked as CVE-2026-15561 with a high severity rating and a CVSS score of 7.5. Red Hat has released a security update in JBoss Enterprise Application Platform 7.4.25 to address this flaw.