Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.eclipse.jetty/jetty-util@9.4.38.v20210224
purl pkg:maven/org.eclipse.jetty/jetty-util@9.4.38.v20210224
Next non-vulnerable version 9.4.39.v20210325
Latest non-vulnerable version 12.1.9
Risk score 2.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2021-28163
Aliases:
GHSA-j6qj-j888-vvgq
Improper Link Resolution Before File Access In Eclipse Jetty, if a user uses a webapps directory that is a symlink, …
9.4.39.v20210325
Not vulnerable
10.0.2
Not vulnerable
11.0.2
Not vulnerable
CVE-2021-28165
Aliases:
GHSA-26vr-8j45-3r4w
Uncontrolled Resource Consumption In Eclipse Jetty to alpha0 to alpha0 to, CPU usage can reach % upon receiving a large …
9.4.39.v20210325
Not vulnerable
10.0.2
Not vulnerable
11.0.2
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2021-28164
Information Exposure In Eclipse Jetty the default compliance mode allows requests with URIs that contain `%2e` or `%2e%2e` segments to … GHSA-v7ff-8wcx-gmc5