Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.eclipse.jetty.http2/jetty-http2-common@12.0.2
purl pkg:maven/org.eclipse.jetty.http2/jetty-http2-common@12.0.2
Next non-vulnerable version 12.0.25
Latest non-vulnerable version 12.1.0.beta3
Risk score 3.5
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-889j-63jv-qhr8
Aliases:
CVE-2025-1948
Eclipse Jetty HTTP/2 client can force the server to allocate a humongous byte buffer that may lead to OoM and …
12.0.17
Vulnerable
12.0.17
Vulnerable
GHSA-mmxm-8w33-wc4h
Aliases:
CVE-2025-5115
Eclipse Jetty affected by MadeYouReset HTTP/2 vulnerability ## Technical Details Below is a technical explanation of a newly discovered vulnerability …
12.0.25
Not vulnerable
12.1.0.beta3
Not vulnerable
12.0.25
Not vulnerable
GHSA-rggv-cv7r-mw98
Aliases:
CVE-2024-22201
Connection leaking on idle timeout when TCP congested ### Impact If an HTTP/2 connection gets TCP congested, when an idle …
12.0.6
Vulnerable
12.0.6
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-qppj-fm5r-hxr3
HTTP/2 Stream Cancellation Attack ## HTTP/2 Rapid reset attack The HTTP/2 protocol allows clients to indicate to the server that … CVE-2023-44487