CVE-2026-81624: Undertow Websocket Missing Limits

WebSocket framing or decompression logic lacks upper bound checks on message/buffer sizes.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Java
greprules fetch cve-2026-81624-undertow-websocket-missing-limits --engine opengrep

Description

WebSocket framing or decompression logic lacks upper bound checks on message/buffer sizes.