Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/jetty9@9.4.39-3?distro=trixie
purl pkg:deb/debian/jetty9@9.4.39-3?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-3f6t-fkt7-wub9 Information Exposure For Eclipse Jetty, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-28164. CVE-2021-34429
GHSA-vjv5-gp2w-65vm

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:01:56.319156+00:00 Debian Importer Fixing VCID-3f6t-fkt7-wub9 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:13:09.814952+00:00 Debian Importer Fixing VCID-3f6t-fkt7-wub9 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:27:50.529171+00:00 Debian Importer Fixing VCID-3f6t-fkt7-wub9 https://security-tracker.debian.org/tracker/data/json 38.1.0