Search for packages
| purl | pkg:maven/org.eclipse.jetty/jetty-http@10.0.5 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-cj7v-27pg-wf7q
Aliases: CVE-2022-2047 |
Jetty invalid URI parsing may produce invalid HttpURI.authority ### Description URI use within Jetty's `HttpURI` class can parse invalid URIs … |
Vulnerable |
|
CVE-2022-2047
Aliases: GHSA-cj7v-27pg-wf7q |
Improper Input Validation In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2026-2332
Aliases: GHSA-355h-qmc2-wpwf |
Jetty has HTTP Request Smuggling via Chunked Extension Quoted-String Parsing - **Request Smuggling**: Attacker injects arbitrary HTTP requests - **Cache … |
Not vulnerable Not vulnerable Not vulnerable Not vulnerable |
|
GHSA-qh8g-58pp-2wxh
Aliases: CVE-2024-6763 |
Eclipse Jetty URI parsing of invalid authority ## Summary Eclipse Jetty is a lightweight, highly scalable, Java-based web server and … |
Vulnerable Vulnerable |
|
GHSA-hmr7-m48g-48f6
Aliases: CVE-2023-40167 |
Jetty accepts "+" prefixed value in Content-Length ### Impact Jetty accepts the '+' character proceeding the content-length value in a … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-355h-qmc2-wpwf
Aliases: CVE-2026-2332 |
Jetty has HTTP Request Smuggling via Chunked Extension Quoted-String Parsing ### Description (as reported) Jetty incorrectly parses quoted strings in … |
Not vulnerable Not vulnerable Not vulnerable Not vulnerable |
|
GHSA-wjpw-4j6x-6rwh
Aliases: CVE-2025-11143 |
org.eclipse.jetty:jetty-http has different parsing of invalid URIs The Jetty URI parser has some key differences compared to other common parsers … |
Vulnerable Vulnerable |