Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.eclipse.jetty/jetty-server@9.0.0
purl pkg:maven/org.eclipse.jetty/jetty-server@9.0.0
Tags Ghost
Next non-vulnerable version 10.0.0.beta3
Latest non-vulnerable version 12.1.10
Risk score 2.4
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2023-40167
Aliases:
GHSA-hmr7-m48g-48f6
Improper Handling of Length Parameter Inconsistency Jetty is a Java based web server and servlet engine. Prior to versions 9.4.52, …
10.0.16
Vulnerable
9.4.52.v20230823
Vulnerable
11.0.16
Vulnerable
12.0.1
Vulnerable
CVE-2018-12536

Information Exposure When an intentionally bad query arrives that does not match a dynamic url-pattern, and is eventually handled by …
9.4.11.v20180605
Vulnerable
9.3.24.v20180605
Vulnerable
9.2.27.v20190403
Vulnerable
9.4.11.v20180605
Vulnerable
9.3.24.v20180605
Vulnerable
9.2.27.v20190403
Vulnerable
GHSA-9rgv-h7x4-qw8g
Aliases:
CVE-2018-12536
Eclipse Jetty Server generates error message containing sensitive information In Eclipse Jetty Server, all 9.x versions, on webapps deployed using …
9.3.24.v20180605
Vulnerable
This package is not known to fix any advisories.