Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.eclipse.jetty.http2/http2-common@9.3.7.v20160115
purl pkg:maven/org.eclipse.jetty.http2/http2-common@9.3.7.v20160115
Next non-vulnerable version 10.0.26
Latest non-vulnerable version 11.0.26
Risk score 10.0
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
GHSA-qppj-fm5r-hxr3
Aliases:
CVE-2023-44487
HTTP/2 Stream Cancellation Attack ## HTTP/2 Rapid reset attack The HTTP/2 protocol allows clients to indicate to the server that … There are no reported fixed by versions.
CVE-2024-22201
Aliases:
GHSA-rggv-cv7r-mw98
Connection leaking on idle timeout when TCP congested If an HTTP/2 connection gets TCP congested, when an idle timeout occurs …
10.0.20
Vulnerable
11.0.20
Vulnerable
10.0.20
Vulnerable
11.0.20
Vulnerable
CVE-2025-5115
Aliases:
GHSA-mmxm-8w33-wc4h
Eclipse Jetty affected by MadeYouReset HTTP/2 vulnerability The MadeYouReset DDoS vulnerability is a logical vulnerability in the HTTP/2 protocol, that …
10.0.26
Not vulnerable
11.0.26
Not vulnerable
10.0.26
Not vulnerable
11.0.26
Not vulnerable
GHSA-mmxm-8w33-wc4h
Aliases:
CVE-2025-5115
Eclipse Jetty affected by MadeYouReset HTTP/2 vulnerability ## Technical Details Below is a technical explanation of a newly discovered vulnerability …
10.0.26
Not vulnerable
11.0.26
Not vulnerable
GHSA-rggv-cv7r-mw98
Aliases:
CVE-2024-22201
Connection leaking on idle timeout when TCP congested ### Impact If an HTTP/2 connection gets TCP congested, when an idle …
10.0.20
Vulnerable
11.0.20
Vulnerable
This package is not known to fix any advisories.