Search for packages
Package details: pkg:maven/org.eclipse.jetty/jetty-http@9.4.37
purl pkg:maven/org.eclipse.jetty/jetty-http@9.4.37
Tags Ghost
Next non-vulnerable version 12.0.12
Latest non-vulnerable version 12.0.12
Risk 10.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-zrfa-mk5w-aaar
Aliases:
CVE-2021-28164
GHSA-v7ff-8wcx-gmc5
Authorization Before Parsing and Canonicalization in jetty
9.4.38.v20210224
Affected by 8 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2024-09-17T22:40:36.550519+00:00 GitLab Importer Affected by VCID-zrfa-mk5w-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.eclipse.jetty/jetty-http/CVE-2021-28164.yml 34.0.1
2024-01-03T18:03:00.777878+00:00 GitLab Importer Affected by VCID-zrfa-mk5w-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.eclipse.jetty/jetty-http/CVE-2021-28164.yml 34.0.0rc1