VulnerableCode Package Details - pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.40

Search for packages

Package details: pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.40

Essentials
History (3)

purl	pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.40
Tags	Ghost

Next non-vulnerable version	9.4.54.v20240208
Latest non-vulnerable version	11.0.18
Risk	10.0

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-7sjs-prdk-aaar Aliases: CVE-2021-28169 GHSA-gwcr-j4wh-j3cq	Jetty Utility Servlets ConcatServlet Double Decoding Information Disclosure Vulnerability	9.4.40.v20210413 Affected by 7 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 9.4.41 Affected by 0 other vulnerabilities. 9.4.41.v20210516 Affected by 6 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 10.0.3 Affected by 7 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 11.0.3 Affected by 7 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-7sjs-prdk-aaar
Aliases:
CVE-2021-28169
GHSA-gwcr-j4wh-j3cq

Jetty Utility Servlets ConcatServlet Double Decoding Information Disclosure Vulnerability

9.4.40.v20210413
Affected by 7 other vulnerabilities.

9.4.41
Affected by 0 other vulnerabilities.

9.4.41.v20210516
Affected by 6 other vulnerabilities.

10.0.3
Affected by 7 other vulnerabilities.

11.0.3
Affected by 7 other vulnerabilities.

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-01-17T02:37:53.978908+00:00	GHSA Importer	Affected by	VCID-7sjs-prdk-aaar	None	35.1.0
2024-09-17T22:05:03.356802+00:00	GHSA Importer	Affected by	VCID-7sjs-prdk-aaar	https://github.com/advisories/GHSA-gwcr-j4wh-j3cq	34.0.1
2024-01-03T17:39:55.399625+00:00	GHSA Importer	Affected by	VCID-7sjs-prdk-aaar	https://github.com/advisories/GHSA-gwcr-j4wh-j3cq	34.0.0rc1