Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.eclipse.jetty.http2/jetty-http2-common@12.0.6
purl pkg:maven/org.eclipse.jetty.http2/jetty-http2-common@12.0.6
Next non-vulnerable version 12.0.25
Latest non-vulnerable version 12.1.0.beta3
Risk score 3.5
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-889j-63jv-qhr8
Aliases:
CVE-2025-1948
Eclipse Jetty HTTP/2 client can force the server to allocate a humongous byte buffer that may lead to OoM and …
12.0.17
Vulnerable
12.0.17
Vulnerable
GHSA-mmxm-8w33-wc4h
Aliases:
CVE-2025-5115
Eclipse Jetty affected by MadeYouReset HTTP/2 vulnerability ## Technical Details Below is a technical explanation of a newly discovered vulnerability …
12.0.25
Not vulnerable
12.1.0.beta3
Not vulnerable
12.0.25
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-rggv-cv7r-mw98
Connection leaking on idle timeout when TCP congested ### Impact If an HTTP/2 connection gets TCP congested, when an idle … CVE-2024-22201