CVE-2026-10051

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-10051
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-10051.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-10051
Downstream
Published
2026-07-14T08:44:38.233Z
Modified
2026-07-16T03:48:11.145610569Z
Severity
  • 6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
[none]
Details

In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the trailers in subsequent requests performed over the same connection. Subsequent request that do not have trailers report the trailers of the first request. Subsequent request that do have trailers report the union of trailers of the first request and the current request.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/10xxx/CVE-2026-10051.json",
    "cna_assigner": "eclipse",
    "cwe_ids": [
        "CWE-200"
    ]
}
References

Affected packages

Git / github.com/jetty/jetty.project

Affected ranges

Type
GIT
Repo
https://github.com/jetty/jetty.project
Events
Introduced
28100e8da711e44c0722ed10bd413ae862497539
Fixed
a8f56e2a89f28be5a9466418a05f9e536b3b2c81
Introduced
c8372b65bd15404de1444d68902c0455a3a69b64
Fixed
986024525891c2c20ff08c58ba300dc3b9847586
Database specific 
{
    "cpe": "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "12.0.0"
        },
        {
            "fixed": "12.0.36"
        },
        {
            "introduced": "12.1.0"
        },
        {
            "fixed": "12.1.10"
        }
    ]
}

Affected versions

jetty-12.*
jetty-12.0.0x
jetty-12.0.14
jetty-12.0.15
jetty-12.0.19
jetty-12.0.22
jetty-12.0.23
jetty-12.0.30
jetty-12.0.31
jetty-12.0.5
jetty-12.0.6
jetty-12.1.0.beta1
jetty-12.1.2
jetty-12.1.4
jetty-12.1.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-10051.json"