Search for packages
| purl | pkg:maven/org.eclipse.jetty/jetty-server@9.4.53.v20231009 |
| Next non-vulnerable version | 9.4.57.v20241219 |
| Latest non-vulnerable version | 12.1.6 |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-kx4x-gnk4-yugu
Aliases: CVE-2024-13009 GHSA-q4rv-gq96-w7c5 |
**UNSUPPORTED WHEN ASSIGNED** GzipHandler causes part of request body to be seen as request body of a separate request In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a request body. This can result in corrupted and/or inadvertent sharing of data between requests. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T23:28:35.503084+00:00 | GitLab Importer | Affected by | VCID-kx4x-gnk4-yugu | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.eclipse.jetty/jetty-server/CVE-2024-13009.yml | 38.4.0 |
| 2026-04-12T00:48:12.081572+00:00 | GitLab Importer | Affected by | VCID-kx4x-gnk4-yugu | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.eclipse.jetty/jetty-server/CVE-2024-13009.yml | 38.3.0 |
| 2026-04-03T00:56:11.847528+00:00 | GitLab Importer | Affected by | VCID-kx4x-gnk4-yugu | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.eclipse.jetty/jetty-server/CVE-2024-13009.yml | 38.1.0 |