Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-9299-c6m4-mjhc
  • Maven/org.eclipse.jetty:jetty-server
 Eclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requests 22 Jul
  • Fix available
  • Severity - 7.5 (High)
GHSA-7p3p-8qv8-m2vh
  • Maven/org.eclipse.jetty:jetty-server
 Eclipse Jetty: HTTP Authority/Host mismatch 22 Jul
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-f4v5-65jj-pcr2
  • Maven/org.eclipse.jetty:jetty-server
 Eclipse Jetty: Cross-Request Leakage for trailers on HTTP/1.1 keep-alive connections 22 Jul
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-xxh7-fcf3-rj7f
  • Maven/org.eclipse.jetty:jetty-server
 The Eclipse Jetty Server Artifact has a Gzip request memory leak 05 Mar
  • Fix available
  • Severity - 7.5 (High)
GHSA-q4rv-gq96-w7c5
  • Maven/org.eclipse.jetty:jetty-server
 **UNSUPPORTED WHEN ASSIGNED** GzipHandler causes part of request body to be seen as request body of a separate request 08 May 2025
  • Fix available
  • Severity - 7.2 (High)
GHSA-g8m5-722r-8whq
  • Maven/org.eclipse.jetty:jetty-server
 Eclipse Jetty's ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks 14 Oct 2024
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-qw69-rqj8-6qw8
  • Maven/org.eclipse.jetty:jetty-server
 OutOfMemoryError for large multipart without filename in Eclipse Jetty 19 Apr 2023
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-p26g-97m4-6q7c
  • Maven/org.eclipse.jetty:jetty-server
 Eclipse Jetty's cookie parsing of quoted values can exfiltrate values from other cookies 18 Apr 2023
  • Fix available
  • Severity - 2.4 (Low)
GHSA-8mpp-f3f7-xc28
  • Maven/org.eclipse.jetty:jetty-server
 Jetty SslConnection does not release pooled ByteBuffers in case of errors 07 Jul 2022
  • Fix available
  • Severity - 7.5 (High)
GHSA-qxp4-27vx-xmm3
  • Maven/org.eclipse.jetty:jetty-server
 Improper Input Validation in Jetty 14 May 2022
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-jg2x-r643-w2ch
  • Maven/org.eclipse.jetty:jetty-server
 Jetty Uses Predictable Session Identifiers 01 May 2022
  • Fix available
GHSA-m6cp-vxjx-65j6
  • Maven/org.eclipse.jetty:jetty-server
 SessionListener can prevent a session from being invalidated breaking logout 23 Jun 2021
  • Fix available
  • Severity - 3.5 (Low)
GHSA-26vr-8j45-3r4w
  • Maven/org.eclipse.jetty:jetty-server
 Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources 06 Apr 2021
  • Fix available
  • Severity - 7.5 (High)
GHSA-m394-8rww-3jr7
  • Maven/org.eclipse.jetty:jetty-server
 DOS vulnerability for Quoted Quality CSV headers 10 Mar 2021
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-86wm-rrjm-8wh8
  • Maven/org.eclipse.jetty:jetty-server
 Buffer not correctly recycled in Gzip Request inflation 02 Dec 2020
  • Fix available
  • Severity - 4.8 (Medium)
GHSA-x3rh-m7vp-35f2
  • Maven/org.eclipse.jetty:jetty-server
 Operation on a Resource after Expiration or Release in Jetty Server 05 Aug 2020
  • Fix available
  • Severity - 9.4 (Critical)
Load more...