Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.eclipse.jetty/jetty-server@9.4.37
purl pkg:maven/org.eclipse.jetty/jetty-server@9.4.37
Tags Ghost
Next non-vulnerable version 10.0.0.beta3
Latest non-vulnerable version 12.1.10
Risk score
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
CVE-2021-28164
Aliases:
GHSA-v7ff-8wcx-gmc5
Information Exposure In Eclipse Jetty the default compliance mode allows requests with URIs that contain `%2e` or `%2e%2e` segments to …
9.4.38.v20210224
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-m394-8rww-3jr7
DOS vulnerability for Quoted Quality CSV headers ### Impact When Jetty handles a request containing request headers with a large … CVE-2020-27223