Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.eclipse.jetty/jetty-http@7.0.0.M4
purl pkg:maven/org.eclipse.jetty/jetty-http@7.0.0.M4
Next non-vulnerable version 12.0.33
Latest non-vulnerable version 12.1.7
Risk score 1.2
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-cj7v-27pg-wf7q
Aliases:
CVE-2022-2047
Jetty invalid URI parsing may produce invalid HttpURI.authority ### Description URI use within Jetty's `HttpURI` class can parse invalid URIs … There are no reported fixed by versions.
CVE-2022-2047
Aliases:
GHSA-cj7v-27pg-wf7q
Improper Input Validation In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the …
11.0.10
Vulnerable
9.4.46.v20220331
Vulnerable
10.0.9
Vulnerable
CVE-2020-27216

Creation of Temporary File in Directory with Insecure Permissions In Eclipse Jetty on Unix like systems, the system's temporary directory …
9.4.33.v20201020
Vulnerable
10.0.0.beta3
Vulnerable
11.0.0.beta3
Vulnerable
This package is not known to fix any advisories.