Search for packages
purl | pkg:maven/org.eclipse.jetty.http2/http2-server@9.3.0.M1 |
Next non-vulnerable version | 9.4.53.v20231009 |
Latest non-vulnerable version | 11.0.17 |
Risk | 4.0 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-dgvv-8aq3-aaaf
Aliases: CVE-2022-2048 GHSA-wgmr-mf83-7x4j |
In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources left to process good requests. |
Affected by 0 other vulnerabilities. Affected by 1 other vulnerability. Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |