UNDERTOW-2609 Previous fixes in the handling of decoded characters in query requests reflect in getQueryString of APIs

• 
• Resolved

UNDERTOW-2656 CVE-2025-12543 Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF

• 
• Resolved

UNDERTOW-2668 ServletRelativePathAttribute switch to %U from %R and return absolute path

• 
• Resolved

UNDERTOW-2674 Wrong codes sent on WebSocket connection close

• 
• Resolved

UNDERTOW-2675 Make Undertow compatible with RFC6265

• 
• Closed

UNDERTOW-1359 HTTP2 - java.lang.IllegalStateException: UT000091: Buffer has already been freed

• 
• Closed

UNDERTOW-1561 ServletContext.getResourcePaths() omits Resources that are not available directly on the file system

• 
• Closed

UNDERTOW-2165 READ_TIMEOUT is not taken into account in HTTP2 listener

• 
• Closed

UNDERTOW-2269 Encode Query string on forward/include and properly handle merging

• 
• Closed

UNDERTOW-2591 SSEHandler header Connection is set to close

• 
• Closed

UNDERTOW-2662 Quoted cookie versions cannot be parsed correctly

• 
• Closed

UNDERTOW-2638 Process all buffers in ChunkedStreamSinkConduit.write(ByteBuffer[], int, int)

• 
• Closed

UNDERTOW-2643 At ServletOutputStreamImpl.close remove the conversion of int to String

• 
• Closed

UNDERTOW-2644 Upgrade wildfly openssl to 2.2.5.Final

• 
• Closed