| Eclipse Jetty: HTTP Authority/Host mismatchCVE-2026-6790 · GHSA-7P3P-8QV8-M2VH |
org.eclipse.jetty:jetty-serverOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
Medium
|
Fix reported |
|
| Eclipse Jetty: Cross-Request Leakage for trailers on HTTP/1.1 keep-alive connectionsCVE-2026-10051 · GHSA-F4V5-65JJ-PCR2 |
org.eclipse.jetty:jetty-serverOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
Medium
|
Fix reported |
|
| The Eclipse Jetty Server Artifact has a Gzip request memory leak CVE-2026-1605 · GHSA-XXH7-FCF3-RJ7F |
org.eclipse.jetty:jetty-serverOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
High
|
Fix reported |
|
| **UNSUPPORTED WHEN ASSIGNED** GzipHandler causes part of request body to be seen as request body of a separate requestCVE-2024-13009 · GHSA-Q4RV-GQ96-W7C5 |
org.eclipse.jetty:jetty-serverA-MQ Clients 2/jetty-server |
MavenRed Hat |
High
|
Fix reported |
|
| Eclipse Jetty's ThreadLimitHandler.getRemote() vulnerable to remote DoS attacksCVE-2024-8184 · GHSA-G8M5-722R-8WHQ |
org.eclipse.jetty:jetty-serverOpenShift Serverless/jetty-server |
MavenRed Hat |
Medium
|
Fix reported |
|
| OutOfMemoryError for large multipart without filename in Eclipse JettyCVE-2023-26048 · GHSA-QW69-RQJ8-6QW8 |
org.eclipse.jetty:jetty-serverOpenShift Serverless/jetty-server |
MavenRed Hat |
Medium
|
Fix reported |
|
| Eclipse Jetty's cookie parsing of quoted values can exfiltrate values from other cookiesCVE-2023-26049 · GHSA-P26G-97M4-6Q7C |
org.eclipse.jetty:jetty-serverMigration Toolkit for Applications 6/jetty-server |
MavenRed Hat |
Low
|
Fix reported |
|
| Eclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requestsCVE-2024-7708 · GHSA-9299-C6M4-MJHC |
org.eclipse.jetty:jetty-server |
Maven |
High
|
Fix reported |
|
| SessionListener can prevent a session from being invalidated breaking logoutCVE-2021-34428 · GHSA-M6CP-VXJX-65J6 |
org.eclipse.jetty:jetty-serverRed Hat Enterprise Linux 7/jetty |
MavenRed Hat |
Low
|
Fix reported |
|
| Jetty SslConnection does not release pooled ByteBuffers in case of errorsCVE-2022-2191 · GHSA-8MPP-F3F7-XC28 |
org.eclipse.jetty:jetty-serverRed Hat JBoss Data Grid 7/jetty-server |
MavenRed Hat |
High
|
Fix reported |
|
| Uncontrolled Resource Consumption in org.eclipse.jetty:jetty-serverCVE-2018-12545 · GHSA-H2F4-V4C4-6WX4 |
org.eclipse.jetty:jetty-serverRed Hat Enterprise Linux 7/jetty |
MavenRed Hat |
High
|
Fix reported |
|
| Improper Input Validation in JettyCVE-2011-4461 · GHSA-QXP4-27VX-XMM3 |
org.eclipse.jetty:jetty-serverRed Hat Enterprise Linux 6/jetty-eclipse |
MavenRed Hat |
Medium
|
Fix reported |
|
| Operation on a Resource after Expiration or Release in Jetty ServerCVE-2019-17638 · GHSA-X3RH-M7VP-35F2 |
org.eclipse.jetty:jetty-server |
Maven |
Critical
|
Fix reported |
|
| Installation information leak in Eclipse JettyCVE-2019-10247 · GHSA-XC67-HJX6-CGG6 |
org.eclipse.jetty:jetty-serverRed Hat Enterprise Linux 6/jetty-eclipse |
MavenRed Hat |
Medium
|
Fix reported |
|
| Buffer not correctly recycled in Gzip Request inflationCVE-2020-27218 · GHSA-86WM-RRJM-8WH8 |
org.eclipse.jetty:jetty-serverRed Hat Enterprise Linux 8/jetty |
MavenRed Hat |
Medium
|
Fix reported |
|
| Access and integrity issue within Eclipse JettyCVE-2018-12538 · GHSA-MWCX-532G-8PQ3 |
org.eclipse.jetty:jetty-server |
Maven |
High
|
Fix reported |
|
| Critical severity vulnerability that affects org.eclipse.jetty:jetty-serverCVE-2017-7657 · GHSA-VGG8-72F2-QM23 |
org.eclipse.jetty:jetty-serverRed Hat Enterprise Linux 6/jetty-eclipse |
MavenRed Hat |
Critical
|
Fix reported |
|
| Jetty vulnerable to exposure of sensitive information due to observable discrepancyCVE-2017-9735 · GHSA-WFCC-PFF6-RGC5 |
org.eclipse.jetty:jetty-serverRed Hat Enterprise Linux 6/jetty-eclipse |
MavenRed Hat |
High
|
Fix reported |
|
| Jetty contains an alias issue that could allow unauthenticated remote code execution due to specially crafted requestCVE-2016-4800 · GHSA-872G-2H8H-362Q |
org.eclipse.jetty:jetty-server |
Maven |
Critical
|
Fix reported |
|
| Jetty vulnerable to exposure of sensitive information to unauthenticated remote usersCVE-2015-2080 · GHSA-GHGJ-3XQR-6JFM |
org.eclipse.jetty:jetty-server |
Maven |
High
|
Fix reported |
|
