Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.eclipse.jetty.http2/http2-server@9.4.39.v20210325
purl pkg:maven/org.eclipse.jetty.http2/http2-server@9.4.39.v20210325
Next non-vulnerable version 10.0.17
Latest non-vulnerable version 11.0.17
Risk score 10.0
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-wgmr-mf83-7x4j
Aliases:
CVE-2022-2048
Jetty vulnerable to Invalid HTTP/2 requests that can lead to denial of service ### Description Invalid HTTP/2 requests (for example, … There are no reported fixed by versions.
GHSA-qppj-fm5r-hxr3
Aliases:
CVE-2023-44487
HTTP/2 Stream Cancellation Attack ## HTTP/2 Rapid reset attack The HTTP/2 protocol allows clients to indicate to the server that … There are no reported fixed by versions.
This package is not known to fix any advisories.