Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.eclipse.jetty/jetty-http@9.4.49.v20220914
purl pkg:maven/org.eclipse.jetty/jetty-http@9.4.49.v20220914
Next non-vulnerable version 12.0.33
Latest non-vulnerable version 12.1.7
Risk score 3.4
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
CVE-2026-2332
Aliases:
GHSA-355h-qmc2-wpwf
Jetty has HTTP Request Smuggling via Chunked Extension Quoted-String Parsing - **Request Smuggling**: Attacker injects arbitrary HTTP requests - **Cache …
12.1.7
Not vulnerable
12.0.33
Not vulnerable
12.1.7
Not vulnerable
12.0.33
Not vulnerable
GHSA-qh8g-58pp-2wxh
Aliases:
CVE-2024-6763
Eclipse Jetty URI parsing of invalid authority ## Summary Eclipse Jetty is a lightweight, highly scalable, Java-based web server and …
12.0.12
Vulnerable
12.0.12
Vulnerable
GHSA-hmr7-m48g-48f6
Aliases:
CVE-2023-40167
Jetty accepts "+" prefixed value in Content-Length ### Impact Jetty accepts the '+' character proceeding the content-length value in a …
10.0.16
Vulnerable
11.0.16
Vulnerable
GHSA-355h-qmc2-wpwf
Aliases:
CVE-2026-2332
Jetty has HTTP Request Smuggling via Chunked Extension Quoted-String Parsing ### Description (as reported) Jetty incorrectly parses quoted strings in …
12.1.7
Not vulnerable
12.0.33
Not vulnerable
12.1.7
Not vulnerable
12.0.33
Not vulnerable
GHSA-wjpw-4j6x-6rwh
Aliases:
CVE-2025-11143
org.eclipse.jetty:jetty-http has different parsing of invalid URIs The Jetty URI parser has some key differences compared to other common parsers …
12.0.31
Vulnerable
12.1.5
Vulnerable
This package is not known to fix any advisories.