Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.eclipse.jetty.http2/jetty-http2-common@12.0.9
purl pkg:maven/org.eclipse.jetty.http2/jetty-http2-common@12.0.9
Next non-vulnerable version 12.0.25
Latest non-vulnerable version 12.1.0.beta3
Risk score 3.5
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-889j-63jv-qhr8
Aliases:
CVE-2025-1948
Eclipse Jetty HTTP/2 client can force the server to allocate a humongous byte buffer that may lead to OoM and …
12.0.17
Vulnerable
12.0.17
Vulnerable
GHSA-mmxm-8w33-wc4h
Aliases:
CVE-2025-5115
Eclipse Jetty affected by MadeYouReset HTTP/2 vulnerability ## Technical Details Below is a technical explanation of a newly discovered vulnerability …
12.0.25
Not vulnerable
12.1.0.beta3
Not vulnerable
12.0.25
Not vulnerable
This package is not known to fix any advisories.