RHLW-2026-37913c8c5f4bdea1

See a problem?
Please try reporting it to the source first.
Source
https://github.com/project-lightwell/lightwell-osv/blob/main/advisories/RHLW-2026-37913c8c5f4bdea1.json
Import Source
https://github.com/project-lightwell/lightwell-osv/blob/main/advisories/RHLW-2026-37913c8c5f4bdea1.json
JSON Data
https://api.osv.dev/v1/vulns/RHLW-2026-37913c8c5f4bdea1
Upstream
Published
2026-10-08T19:46:22Z
Modified
2026-10-27T04:00:07Z
Severity
  • 7.4 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
Lightwell Security Advisory: jetty-ee10-demo-async-rest-jar 12.0.32.rhlw-00002
Details

Red Hat Lightwell has released org.eclipse.jetty.ee10.demos:jetty-ee10-demo-async-rest-jar 12.0.32.rhlw-00002 with a backported security fix.

CVE-2026-2332: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

This patched artifact is a drop-in replacement for org.eclipse.jetty.ee10.demos:jetty-ee10-demo-async-rest-jar 12.0.32 from Maven Central.

References
Credits
    • Red Hat Lightwell - REMEDIATION_DEVELOPER

Affected packages

Red Hat Lightwell:Maven / org.eclipse.jetty.ee10.demos:jetty-ee10-demo-async-rest-jar

Package

Name
org.eclipse.jetty.ee10.demos:jetty-ee10-demo-async-rest-jar
Purl
pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-async-rest-jar

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
12.0.32.rhlw-00002

Affected versions

12.*
12.0.0.alpha0
12.0.0.alpha1
12.0.0.alpha2
12.0.0.alpha3
12.0.0.beta0
12.0.0.beta1
12.0.0.beta2
12.0.0.beta3
12.0.0.beta4
12.0.0
12.0.1
12.0.2
12.0.3
12.0.4
12.0.5
12.0.6
12.0.7
12.0.8
12.0.9
12.0.10
12.0.11
12.0.12
12.0.13
12.0.14
12.0.15
12.0.16
12.0.17
12.0.18
12.0.19
12.0.20
12.0.21
12.0.22
12.0.23
12.0.24
12.0.25
12.0.26
12.0.27
12.0.28
12.0.29
12.0.30
12.0.31
12.0.32

Database specific

lightwell 
{
    "backport_base_version":  "12.0.32",
    "remediated_version":  "12.0.32.rhlw-00002",
    "repository_url":  "https://packages.redhat.com/lightwell/java/remediated/"
}
source 
"https://github.com/project-lightwell/lightwell-osv/blob/main/advisories/RHLW-2026-37913c8c5f4bdea1.json"