Search for packages
| purl | pkg:maven/org.eclipse.jetty/jetty-http@9.4.5.v20170502 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2017-7658
|
In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2017-7657
|
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2017-7656
|
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), HTTP/0.9 is … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-cj7v-27pg-wf7q
Aliases: CVE-2022-2047 |
Jetty invalid URI parsing may produce invalid HttpURI.authority ### Description URI use within Jetty's `HttpURI` class can parse invalid URIs … | There are no reported fixed by versions. |
|
CVE-2019-10247
|
Information Exposure In Eclipse Jetty version, the server running on any OS and Jetty version combination will reveal the configured … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2019-10241
|
Cross-site Scripting Jetty server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2022-2047
Aliases: GHSA-cj7v-27pg-wf7q |
Improper Input Validation In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2021-28165
Aliases: GHSA-26vr-8j45-3r4w |
Uncontrolled Resource Consumption In Eclipse Jetty to alpha0 to alpha0 to, CPU usage can reach % upon receiving a large … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2020-27216
|
Creation of Temporary File in Directory with Insecure Permissions In Eclipse Jetty on Unix like systems, the system's temporary directory … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2026-2332
Aliases: GHSA-355h-qmc2-wpwf |
Jetty has HTTP Request Smuggling via Chunked Extension Quoted-String Parsing - **Request Smuggling**: Attacker injects arbitrary HTTP requests - **Cache … |
Not vulnerable Not vulnerable Not vulnerable Not vulnerable |
|
GHSA-qh8g-58pp-2wxh
Aliases: CVE-2024-6763 |
Eclipse Jetty URI parsing of invalid authority ## Summary Eclipse Jetty is a lightweight, highly scalable, Java-based web server and … |
Vulnerable Vulnerable |
|
GHSA-hmr7-m48g-48f6
Aliases: CVE-2023-40167 |
Jetty accepts "+" prefixed value in Content-Length ### Impact Jetty accepts the '+' character proceeding the content-length value in a … |
Vulnerable Vulnerable |
|
GHSA-355h-qmc2-wpwf
Aliases: CVE-2026-2332 |
Jetty has HTTP Request Smuggling via Chunked Extension Quoted-String Parsing ### Description (as reported) Jetty incorrectly parses quoted strings in … |
Not vulnerable Not vulnerable Not vulnerable Not vulnerable |
|
GHSA-wjpw-4j6x-6rwh
Aliases: CVE-2025-11143 |
org.eclipse.jetty:jetty-http has different parsing of invalid URIs The Jetty URI parser has some key differences compared to other common parsers … |
Vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2015-2080
|
The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via … |