Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.eclipse.jetty/jetty-http@9.4.58.v20250814
purl pkg:maven/org.eclipse.jetty/jetty-http@9.4.58.v20250814
Next non-vulnerable version 12.0.33
Latest non-vulnerable version 12.1.7
Risk score 3.4
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2026-2332
Aliases:
GHSA-355h-qmc2-wpwf
Jetty has HTTP Request Smuggling via Chunked Extension Quoted-String Parsing - **Request Smuggling**: Attacker injects arbitrary HTTP requests - **Cache …
12.1.7
Not vulnerable
12.0.33
Not vulnerable
12.1.7
Not vulnerable
12.0.33
Not vulnerable
GHSA-qh8g-58pp-2wxh
Aliases:
CVE-2024-6763
Eclipse Jetty URI parsing of invalid authority ## Summary Eclipse Jetty is a lightweight, highly scalable, Java-based web server and …
12.0.12
Vulnerable
12.0.12
Vulnerable
GHSA-355h-qmc2-wpwf
Aliases:
CVE-2026-2332
Jetty has HTTP Request Smuggling via Chunked Extension Quoted-String Parsing ### Description (as reported) Jetty incorrectly parses quoted strings in …
12.1.7
Not vulnerable
12.0.33
Not vulnerable
12.1.7
Not vulnerable
12.0.33
Not vulnerable
This package is not known to fix any advisories.