Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-10050 |
|
Vulnerability in org.eclipse.jetty:jetty-security (CVE-2026-10050)
vulnerability in org.eclipse.jetty:jetty-security (CVE-2026-10050). Confidential information can be exposed externally. Mitigation: upgrade to `12.1.10` or later.
|
| CVE-2026-8384 |
|
Vulnerability in org.eclipse.jetty:jetty-util (CVE-2026-8384)
vulnerability in org.eclipse.jetty:jetty-util (CVE-2026-8384). Risk of unauthorized operations or information disclosure. Exploitable via `GET /admin/secret`. Mitigation: upgrade to `12.1.9` or later.
|
| CVE-2026-6790 |
|
Vulnerability in org.eclipse.jetty:jetty-server (CVE-2026-6790)
vulnerability in org.eclipse.jetty:jetty-server (CVE-2026-6790). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`. Mitigation: upgrade to `12.1.9` or later.
|
| CVE-2024-7708 |
|
Vulnerability in org.eclipse.jetty:jetty-server (CVE-2024-7708)
vulnerability in org.eclipse.jetty:jetty-server (CVE-2024-7708). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.0.23` or later.
|
| CVE-2026-10051 |
|
Information Disclosure in org.eclipse.jetty:jetty-server (CVE-2026-10051)
vulnerability in org.eclipse.jetty:jetty-server (CVE-2026-10051). Confidential information can be exposed externally. Exploitable via `POST /upload`. Mitigation: upgrade to `12.1.10` or later.
|
| CVE-2026-2332 |
|
Vulnerability in org.eclipse.jetty:jetty-http (CVE-2026-2332)
vulnerability in org.eclipse.jetty:jetty-http (CVE-2026-2332). Confidential information can be exposed externally. Exploitable via `GET /smuggled`. Mitigation: upgrade to `11.0.29` or later.
|
| CVE-2026-5795 |
|
Vulnerability in privilege-escalation (CVE-2026-5795)
vulnerability in privilege-escalation (CVE-2026-5795). Confidential information can be exposed externally.
|
| CVE-2026-1605 |
|
Vulnerability in eclipse (CVE-2026-1605)
vulnerability in eclipse (CVE-2026-1605). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-44487 KEV |
|
[KEV] Vulnerability in Ietf golang.org/x/net (CVE-2023-44487)
vulnerability in Ietf golang.org/x/net (CVE-2023-44487). Risk of unauthorized operations or information disclosure. Exploitable via ``Channel``. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `0.17.0` or later.
|
| CVE-2017-9735 |
|
Vulnerability in eclipse (CVE-2017-9735)
vulnerability in eclipse (CVE-2017-9735). Confidential information can be exposed externally.
|
| CVE-2016-4800 |
|
Vulnerability in eclipse (CVE-2016-4800)
vulnerability in eclipse (CVE-2016-4800). Successful exploitation can lead to full system takeover.
|