Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.eclipse.jetty/jetty-server@9.2.26
purl pkg:maven/org.eclipse.jetty/jetty-server@9.2.26
Tags Ghost
Next non-vulnerable version 10.0.0.beta3
Latest non-vulnerable version 12.1.10
Risk score
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2019-10241

Cross-Site Scripting Eclipse Jetty server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against …
9.2.27.v20190403
Vulnerable
9.3.26.v20190403
Vulnerable
9.4.16.v20190411
Vulnerable
CVE-2017-7658

Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) If an intermediary decided on the shorter length, but still passed on …
9.4.11.v20180605
Vulnerable
9.3.24.v20180605
Vulnerable
9.2.26.v20180806
Vulnerable
9.4.11.v20180605
Vulnerable
9.3.24.v20180605
Vulnerable
9.2.26.v20180806
Vulnerable
CVE-2017-7656

Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) Eclipse Jetty contains a vulnerability that could be used to poison the …
9.4.11.v20180605
Vulnerable
9.3.24.v20180605
Vulnerable
9.2.26.v20180806
Vulnerable
9.4.11.v20180605
Vulnerable
9.3.24.v20180605
Vulnerable
9.2.26.v20180806
Vulnerable
This package is not known to fix any advisories.