Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.eclipse.jetty/jetty-client@10.0.0
purl pkg:maven/org.eclipse.jetty/jetty-client@10.0.0
Next non-vulnerable version 10.0.14
Latest non-vulnerable version 12.0.1
Risk score
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
CVE-2021-28163
Aliases:
GHSA-j6qj-j888-vvgq
Improper Link Resolution Before File Access In Eclipse Jetty to beta2 to beta2 to, if a user uses a webapps …
9.4.39.v20210325
Vulnerable
10.0.2
Vulnerable
11.0.2
Vulnerable
CVE-2023-26049
Aliases:
GHSA-p26g-97m4-6q7c
Exposure of Sensitive Information to an Unauthorized Actor Jetty is a java based web server and servlet engine. Nonstandard cookie …
9.4.51.v20230217
Not vulnerable
10.0.14
Not vulnerable
11.0.14
Not vulnerable
12.0.1
Not vulnerable
CVE-2020-27223
Aliases:
GHSA-m394-8rww-3jr7
Uncontrolled Resource Consumption When Jetty handles a request containing multiple `Accept` headers with a large number of `quality` (i.e., `q`) …
10.0.1
Vulnerable
11.0.1
Vulnerable
9.4.37.v20210219
Vulnerable
CVE-2021-28165
Aliases:
GHSA-26vr-8j45-3r4w
Uncontrolled Resource Consumption In Eclipse Jetty to alpha0 to alpha0 to, CPU usage can reach % upon receiving a large …
9.4.39.v20210325
Vulnerable
10.0.2
Vulnerable
11.0.2
Vulnerable
This package is not known to fix any advisories.