{"id":"CVE-2026-3260","state":"REJECTED","title":"The Undertow web server enforces a default maximum HTTP request entity size limit. Any request (including GET or HEAD) containing a body that exceeds this configurable limit is saf","description":"The Undertow web server enforces a default maximum HTTP request entity size limit. Any request (including GET or HEAD) containing a body that exceeds this configurable limit is safely dropped by the server, preventing single-request Resource Exhaustion (Out of Memory) Denial of Service attacks.","publishedAt":"2026-03-24T04:11:16.085Z","updatedAt":"2026-07-07T19:50:22.087Z","severity":null,"assigner":"redhat","products":[],"affected":[],"references":[],"weaknesses":[],"ingestedAt":"2026-10-29T20:11:50.837Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/3xxx/CVE-2026-3260.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-3260","state":"REJECTED","datePublished":"2026-03-24T04:11:16.085Z","dateUpdated":"2026-07-07T19:50:22.087Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2026-02-26T14:22:15.920Z","dateRejected":"2026-07-07T19:50:22.087Z"},"containers":{"cna":{"rejectedReasons":[{"lang":"en","value":"The Undertow web server enforces a default maximum HTTP request entity size limit. Any request (including GET or HEAD) containing a body that exceeds this configurable limit is safely dropped by the server, preventing single-request Resource Exhaustion (Out of Memory) Denial of Service attacks."}],"providerMetadata":{"shortName":"redhat","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateUpdated":"2026-07-07T19:50:22.087Z"},"x_generator":{"engine":"cvelib 1.8.0"}}}}}