Search for packages
| purl | pkg:maven/org.eclipse.jetty.http2/jetty-http2-common@12.0.1 |
| Next non-vulnerable version | 12.0.25 |
| Latest non-vulnerable version | 12.1.0.beta3 |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-qppj-fm5r-hxr3
Aliases: CVE-2023-44487 |
HTTP/2 Stream Cancellation Attack ## HTTP/2 Rapid reset attack The HTTP/2 protocol allows clients to indicate to the server that … |
Vulnerable |
|
GHSA-889j-63jv-qhr8
Aliases: CVE-2025-1948 |
Eclipse Jetty HTTP/2 client can force the server to allocate a humongous byte buffer that may lead to OoM and … |
Vulnerable Vulnerable |
|
GHSA-mmxm-8w33-wc4h
Aliases: CVE-2025-5115 |
Eclipse Jetty affected by MadeYouReset HTTP/2 vulnerability ## Technical Details Below is a technical explanation of a newly discovered vulnerability … |
Not vulnerable Not vulnerable Not vulnerable |
|
GHSA-rggv-cv7r-mw98
Aliases: CVE-2024-22201 |
Connection leaking on idle timeout when TCP congested ### Impact If an HTTP/2 connection gets TCP congested, when an idle … |
Vulnerable Vulnerable |