Login
Log in using an SSO provider:
Fedora Account System
Red Hat Associate
Red Hat Customer
Login using a Red Hat Bugzilla account
Forgot Password
Create an Account
Red Hat Bugzilla – Bug 2528758
Home
New
Search
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh115 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
Migrated Products
[?]
This site requires JavaScript to be enabled to function correctly, please enable it.
Bug 2528758
(
CVE-2026-91920
) -
CVE-2026-91920
undertow: undertow: ChunkReader message length permits chunk-size overflow
Summary:
CVE-2026-91920 undertow: undertow: ChunkReader message length permits chunk-s...
Keywords
:
Security
Status
:
NEW
Alias:
CVE-2026-91920
Product:
Security Response
Classification:
Other
Component:
vulnerability
Sub Component:
---
Version:
unspecified
Hardware:
All
OS:
Linux
Priority:
medium
Severity:
medium
Target Milestone:
---
Assignee:
Product Security
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+
depends on
/
blocked
Reported:
2026-09-04 17:23 UTC by
Tiago Gamboa Cravo dos Santos Lucas
Modified:
2026-10-29 12:19 UTC (
History
)
CC List:
40 users
(
show
)
anujha
aschwart
asoldano
aszczucz
bbaranow
bmaxwell
boliveir
bstansbe
dlofthou
drichtar
fmariani
gmalinko
istudens
ivassile
iweiss
janstey
jwon
mcarlett
mosmerov
mposolda
msvehla
nwallace
pberan
pdelbell
pesilva
pjindal
pmackay
rhel-process-autobot
rmartinc
rstancel
rstepani
security-response-team
ssilvert
sthorger
tcunning
thjenkin
vdosoudi
vmuzikar
watson-tool-maintainers
yfang
Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:
Attachments
(Terms of Use)
Description
Tiago Gamboa Cravo dos Santos Lucas
2026-09-04 17:23:58 UTC
HASH(0x56516ce3da90)
Note
You need to
log in
before you can comment on or make changes to this bug.