Search for packages
Package details: pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.38
purl pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.38
Tags Ghost
Next non-vulnerable version 9.4.52.v20230823
Latest non-vulnerable version 11.0.16
Risk 10.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-zrfa-mk5w-aaar
Aliases:
CVE-2021-28164
GHSA-v7ff-8wcx-gmc5
Authorization Before Parsing and Canonicalization in jetty
9.4.38.v20210224
Affected by 7 other vulnerabilities.
9.4.39
Affected by 0 other vulnerabilities.
9.4.39.v20210325
Affected by 6 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2024-09-17T22:40:29.619123+00:00 GitLab Importer Affected by VCID-zrfa-mk5w-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.eclipse.jetty/jetty-webapp/CVE-2021-28164.yml 34.0.1
2024-01-03T18:02:54.580286+00:00 GitLab Importer Affected by VCID-zrfa-mk5w-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.eclipse.jetty/jetty-webapp/CVE-2021-28164.yml 34.0.0rc1