With regard to https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1757:

- I can't find 2.0.30.sp1 and 2.1.0 final tags in https://github.com/undertow-io/undertow . 

- In binary form, I can find 2.1.0.Final in maven central repository, but 2.0.30.sp1 is not available there either.