Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.eclipse.jetty/jetty-http@12.0.25
purl pkg:maven/org.eclipse.jetty/jetty-http@12.0.25
Next non-vulnerable version 12.0.33
Latest non-vulnerable version 12.1.7
Risk score 3.4
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2026-2332
Aliases:
GHSA-355h-qmc2-wpwf
Jetty has HTTP Request Smuggling via Chunked Extension Quoted-String Parsing - **Request Smuggling**: Attacker injects arbitrary HTTP requests - **Cache …
12.1.7
Not vulnerable
12.0.33
Not vulnerable
12.1.7
Not vulnerable
12.0.33
Not vulnerable
GHSA-355h-qmc2-wpwf
Aliases:
CVE-2026-2332
Jetty has HTTP Request Smuggling via Chunked Extension Quoted-String Parsing ### Description (as reported) Jetty incorrectly parses quoted strings in …
12.1.7
Not vulnerable
12.0.33
Not vulnerable
12.1.7
Not vulnerable
12.0.33
Not vulnerable
12.0.33
Not vulnerable
GHSA-wjpw-4j6x-6rwh
Aliases:
CVE-2025-11143
org.eclipse.jetty:jetty-http has different parsing of invalid URIs The Jetty URI parser has some key differences compared to other common parsers …
12.0.31
Vulnerable
12.1.5
Vulnerable
12.0.31
Vulnerable
This package is not known to fix any advisories.