CriticalFix available
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.12 security update
Type: advisorySources: OSV
- Products
- eap8-bouncycastle, eap8-bouncycastle-jmail, eap8-bouncycastle-pg, eap8-bouncycastle-pkix, eap8-bouncycastle-prov, eap8-bouncycastle-util, eap8-codemodel, eap8-guava, eap8-guava-libraries, eap8-jaxb, eap8-jaxb-core, eap8-jaxb-jxc, eap8-jaxb-runtime, eap8-jaxb-xjc, eap8-jcip-annotations, eap8-relaxng-datatype, eap8-rngom, eap8-slf4j-jboss-logmanager, eap8-txw2, eap8-undertow, eap8-xsom
- Affected versions
- Not specified
- Fixed versions
- 0:1.0.0-3.redhat_00009.1.el9eap, 0:1.83.0-1.redhat_00001.1.el9eap, 0:2.0.2-1.Final_redhat_00001.1.el9eap, 0:2.3.23-1.SP3_redhat_00001.1.el9eap, 0:33.0.0-2.jre_redhat_00003.1.el9eap, 0:4.0.6-1.redhat_00001.1.el9eap
- CVEs
- CVE-2024-3884, CVE-2025-12543, CVE-2025-9784
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 17:46 UTC · Revision 1
Source evidence
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.12 security update
core-osv · Original sourcePublished 6 Mar 2026, 10:13 UTC
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.12 security update
osv:RHSA-2026:3891
eap8-bouncycastle
Fixed versions: 0:1.83.0-1.redhat_00001.1.el9eap
eap8-bouncycastle-jmail
Fixed versions: 0:1.83.0-1.redhat_00001.1.el9eap
eap8-bouncycastle-pg
Fixed versions: 0:1.83.0-1.redhat_00001.1.el9eap
eap8-bouncycastle-pkix
Fixed versions: 0:1.83.0-1.redhat_00001.1.el9eap
eap8-bouncycastle-prov
Fixed versions: 0:1.83.0-1.redhat_00001.1.el9eap
eap8-bouncycastle-util
Fixed versions: 0:1.83.0-1.redhat_00001.1.el9eap
eap8-codemodel
Fixed versions: 0:4.0.6-1.redhat_00001.1.el9eap
eap8-guava
Fixed versions: 0:33.0.0-2.jre_redhat_00003.1.el9eap
eap8-guava-libraries
Fixed versions: 0:33.0.0-2.jre_redhat_00003.1.el9eap
eap8-jaxb
Fixed versions: 0:4.0.6-1.redhat_00001.1.el9eap
eap8-jaxb-core
Fixed versions: 0:4.0.6-1.redhat_00001.1.el9eap
eap8-jaxb-jxc
Fixed versions: 0:4.0.6-1.redhat_00001.1.el9eap
eap8-jaxb-runtime
Fixed versions: 0:4.0.6-1.redhat_00001.1.el9eap
eap8-jaxb-xjc
Fixed versions: 0:4.0.6-1.redhat_00001.1.el9eap
eap8-jcip-annotations
Fixed versions: 0:1.0.0-3.redhat_00009.1.el9eap
eap8-relaxng-datatype
Fixed versions: 0:4.0.6-1.redhat_00001.1.el9eap
eap8-rngom
Fixed versions: 0:4.0.6-1.redhat_00001.1.el9eap
eap8-slf4j-jboss-logmanager
Fixed versions: 0:2.0.2-1.Final_redhat_00001.1.el9eap
eap8-txw2
Fixed versions: 0:4.0.6-1.redhat_00001.1.el9eap
eap8-undertow
Fixed versions: 0:2.3.23-1.SP3_redhat_00001.1.el9eap
eap8-xsom
Fixed versions: 0:4.0.6-1.redhat_00001.1.el9eap
Complete source record
{
"id": "c3a555b23282ec71075417677edb49fe3d9d9d552b6ae630f0be0453fb2b9f86",
"url": "https://osv.dev/vulnerability/RHSA-2026%3A3891",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.12 security update",
"summary": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.12 security update",
"evidence": "osv:RHSA-2026:3891",
"products": [
{
"name": {
"value": "eap8-bouncycastle",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.83.0-1.redhat_00001.1.el9eap",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-bouncycastle-jmail",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.83.0-1.redhat_00001.1.el9eap",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-bouncycastle-pg",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.83.0-1.redhat_00001.1.el9eap",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-bouncycastle-pkix",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.83.0-1.redhat_00001.1.el9eap",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-bouncycastle-prov",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.83.0-1.redhat_00001.1.el9eap",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-bouncycastle-util",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.83.0-1.redhat_00001.1.el9eap",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-codemodel",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.0.6-1.redhat_00001.1.el9eap",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-guava",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:33.0.0-2.jre_redhat_00003.1.el9eap",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-guava-libraries",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:33.0.0-2.jre_redhat_00003.1.el9eap",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-jaxb",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.0.6-1.redhat_00001.1.el9eap",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-jaxb-core",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.0.6-1.redhat_00001.1.el9eap",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-jaxb-jxc",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.0.6-1.redhat_00001.1.el9eap",
"evidence": "/affected/11/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-jaxb-runtime",
"evidence": "/affected/12/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.0.6-1.redhat_00001.1.el9eap",
"evidence": "/affected/12/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-jaxb-xjc",
"evidence": "/affected/13/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.0.6-1.redhat_00001.1.el9eap",
"evidence": "/affected/13/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-jcip-annotations",
"evidence": "/affected/14/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.0.0-3.redhat_00009.1.el9eap",
"evidence": "/affected/14/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-relaxng-datatype",
"evidence": "/affected/15/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.0.6-1.redhat_00001.1.el9eap",
"evidence": "/affected/15/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-rngom",
"evidence": "/affected/16/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.0.6-1.redhat_00001.1.el9eap",
"evidence": "/affected/16/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-slf4j-jboss-logmanager",
"evidence": "/affected/17/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.0.2-1.Final_redhat_00001.1.el9eap",
"evidence": "/affected/17/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-txw2",
"evidence": "/affected/18/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.0.6-1.redhat_00001.1.el9eap",
"evidence": "/affected/18/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-undertow",
"evidence": "/affected/19/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.3.23-1.SP3_redhat_00001.1.el9eap",
"evidence": "/affected/19/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-xsom",
"evidence": "/affected/20/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.0.6-1.redhat_00001.1.el9eap",
"evidence": "/affected/20/ranges"
}
],
"affected_versions": []
}
],
"severity": "critical",
"structured": {
"id": "RHSA-2026:3891",
"aliases": [
"RHSA-2026:3891"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.83.0-1.redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-bouncycastle",
"purl": "pkg:rpm/redhat/eap8-bouncycastle",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:3891.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.83.0-1.redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-bouncycastle-jmail",
"purl": "pkg:rpm/redhat/eap8-bouncycastle-jmail",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:3891.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.83.0-1.redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-bouncycastle-pg",
"purl": "pkg:rpm/redhat/eap8-bouncycastle-pg",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:3891.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.83.0-1.redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-bouncycastle-pkix",
"purl": "pkg:rpm/redhat/eap8-bouncycastle-pkix",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:3891.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.83.0-1.redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-bouncycastle-prov",
"purl": "pkg:rpm/redhat/eap8-bouncycastle-prov",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:3891.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.83.0-1.redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-bouncycastle-util",
"purl": "pkg:rpm/redhat/eap8-bouncycastle-util",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:3891.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.0.6-1.redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-codemodel",
"purl": "pkg:rpm/redhat/eap8-codemodel",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:3891.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:33.0.0-2.jre_redhat_00003.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-guava",
"purl": "pkg:rpm/redhat/eap8-guava",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:3891.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:33.0.0-2.jre_redhat_00003.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-guava-libraries",
"purl": "pkg:rpm/redhat/eap8-guava-libraries",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:3891.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.0.6-1.redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-jaxb",
"purl": "pkg:rpm/redhat/eap8-jaxb",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:3891.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.0.6-1.redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-jaxb-core",
"purl": "pkg:rpm/redhat/eap8-jaxb-core",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:3891.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.0.6-1.redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-jaxb-jxc",
"purl": "pkg:rpm/redhat/eap8-jaxb-jxc",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:3891.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.0.6-1.redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-jaxb-runtime",
"purl": "pkg:rpm/redhat/eap8-jaxb-runtime",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:3891.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.0.6-1.redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-jaxb-xjc",
"purl": "pkg:rpm/redhat/eap8-jaxb-xjc",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:3891.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.0.0-3.redhat_00009.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-jcip-annotations",
"purl": "pkg:rpm/redhat/eap8-jcip-annotations",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:3891.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.0.6-1.redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-relaxng-datatype",
"purl": "pkg:rpm/redhat/eap8-relaxng-datatype",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:3891.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.0.6-1.redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-rngom",
"purl": "pkg:rpm/redhat/eap8-rngom",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:3891.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.0.2-1.Final_redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-slf4j-jboss-logmanager",
"purl": "pkg:rpm/redhat/eap8-slf4j-jboss-logmanager",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:3891.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.0.6-1.redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-txw2",
"purl": "pkg:rpm/redhat/eap8-txw2",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:3891.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.3.23-1.SP3_redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-undertow",
"purl": "pkg:rpm/redhat/eap8-undertow",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:3891.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.0.6-1.redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-xsom",
"purl": "pkg:rpm/redhat/eap8-xsom",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:3891.json"
}
}
],
"modified": "2026-10-15T10:18:29Z",
"provider": "osv",
"upstream": [
"CVE-2024-3884",
"CVE-2025-12543",
"CVE-2025-9784"
],
"references": [
"https://access.redhat.com/errata/RHSA-2026:3891",
"https://access.redhat.com/security/updates/classification/#important",
"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.0",
"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.0/html/release_notes_for_red_hat_jboss_enterprise_application_platform_8.0/index",
"https://access.redhat.com/articles/7120566",
"https://bugzilla.redhat.com/show_bug.cgi?id=2275287",
"https://bugzilla.redhat.com/show_bug.cgi?id=2392306",
"https://bugzilla.redhat.com/show_bug.cgi?id=2408784",
"https://issues.redhat.com/browse/JBEAP-31073",
"https://issues.redhat.com/browse/JBEAP-31251",
"https://issues.redhat.com/browse/JBEAP-31325",
"https://issues.redhat.com/browse/JBEAP-31343",
"https://issues.redhat.com/browse/JBEAP-31358",
"https://issues.redhat.com/browse/JBEAP-31397",
"https://issues.redhat.com/browse/JBEAP-31420",
"https://issues.redhat.com/browse/JBEAP-31438",
"https://issues.redhat.com/browse/JBEAP-31446",
"https://issues.redhat.com/browse/JBEAP-31453",
"https://issues.redhat.com/browse/JBEAP-31566",
"https://issues.redhat.com/browse/JBEAP-31579",
"https://issues.redhat.com/browse/JBEAP-31596",
"https://issues.redhat.com/browse/JBEAP-31679",
"https://issues.redhat.com/browse/JBEAP-31708",
"https://issues.redhat.com/browse/JBEAP-31712",
"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3891.json",
"https://access.redhat.com/security/cve/CVE-2024-3884",
"https://www.cve.org/CVERecord?id=CVE-2024-3884",
"https://nvd.nist.gov/vuln/detail/CVE-2024-3884",
"https://access.redhat.com/security/cve/CVE-2025-9784",
"https://www.cve.org/CVERecord?id=CVE-2025-9784",
"https://nvd.nist.gov/vuln/detail/CVE-2025-9784",
"https://github.com/undertow-io/undertow/pull/1778",
"https://github.com/undertow-io/undertow/releases/tag/2.2.38.Final",
"https://issues.redhat.com/browse/UNDERTOW-2598",
"https://kb.cert.org/vuls/id/767506",
"https://access.redhat.com/security/cve/CVE-2025-12543",
"https://www.cve.org/CVERecord?id=CVE-2025-12543",
"https://nvd.nist.gov/vuln/detail/CVE-2025-12543"
]
},
"related_cves": [
{
"value": "CVE-2024-3884",
"evidence": "/upstream"
},
{
"value": "CVE-2025-12543",
"evidence": "/upstream"
},
{
"value": "CVE-2025-9784",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 331032,
"published_at": "2026-03-06T10:13:29+00:00"
}