Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.eclipse.jetty/jetty-util@9.4.12.RC0
purl pkg:maven/org.eclipse.jetty/jetty-util@9.4.12.RC0
Next non-vulnerable version 9.4.39.v20210325
Latest non-vulnerable version 12.1.9
Risk score 2.4
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2020-27223
Aliases:
GHSA-m394-8rww-3jr7
Uncontrolled Resource Consumption When Jetty handles a request containing multiple `Accept` headers with a large number of `quality` (i.e., `q`) …
10.0.1
Vulnerable
11.0.1
Vulnerable
9.4.37.v20210219
Vulnerable
CVE-2021-28165
Aliases:
GHSA-26vr-8j45-3r4w
Uncontrolled Resource Consumption In Eclipse Jetty to alpha0 to alpha0 to, CPU usage can reach % upon receiving a large …
9.4.39.v20210325
Not vulnerable
10.0.2
Not vulnerable
11.0.2
Not vulnerable
CVE-2020-27216

Creation of Temporary File in Directory with Insecure Permissions In Eclipse Jetty on Unix like systems, the system's temporary directory …
9.4.33.v20201020
Vulnerable
10.0.0.beta3
Not vulnerable
11.0.0.beta3
Not vulnerable
Vulnerabilities fixed by this package (3)

Advisory Summary Aliases
CVE-2018-12536
In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives …
CVE-2017-9735
Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain …
CVE-2016-4800
The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass …