Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.eclipse.jetty/jetty-server@9.2.0
purl pkg:maven/org.eclipse.jetty/jetty-server@9.2.0
Tags Ghost
Next non-vulnerable version 10.0.0.beta3
Latest non-vulnerable version 12.1.10
Risk score 2.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2019-10241

Cross-Site Scripting Eclipse Jetty server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against …
9.2.27.v20190403
Vulnerable
9.3.26.v20190403
Vulnerable
9.4.16.v20190411
Vulnerable
GHSA-r28m-g6j9-r2h5
Aliases:
CVE-2019-10246
Information Exposure vulnerability in Eclipse Jetty In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is …
9.2.28.v20190418
Vulnerable
This package is not known to fix any advisories.