Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: jetty Clear
ID Title
CVE-2026-10050 Vulnerability in org.eclipse.jetty:jetty-security (CVE-2026-10050)
vulnerability in org.eclipse.jetty:jetty-security (CVE-2026-10050). Confidential information can be exposed externally. Mitigation: upgrade to `12.1.10` or later.
CVE-2026-8384 Vulnerability in org.eclipse.jetty:jetty-util (CVE-2026-8384)
vulnerability in org.eclipse.jetty:jetty-util (CVE-2026-8384). Risk of unauthorized operations or information disclosure. Exploitable via `GET /admin/secret`. Mitigation: upgrade to `12.1.9` or later.
CVE-2026-6790 Vulnerability in org.eclipse.jetty:jetty-server (CVE-2026-6790)
vulnerability in org.eclipse.jetty:jetty-server (CVE-2026-6790). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`. Mitigation: upgrade to `12.1.9` or later.
CVE-2024-7708 Vulnerability in org.eclipse.jetty:jetty-server (CVE-2024-7708)
vulnerability in org.eclipse.jetty:jetty-server (CVE-2024-7708). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.0.23` or later.
CVE-2026-10051 Information Disclosure in org.eclipse.jetty:jetty-server (CVE-2026-10051)
vulnerability in org.eclipse.jetty:jetty-server (CVE-2026-10051). Confidential information can be exposed externally. Exploitable via `POST /upload`. Mitigation: upgrade to `12.1.10` or later.
CVE-2026-2332 Vulnerability in org.eclipse.jetty:jetty-http (CVE-2026-2332)
vulnerability in org.eclipse.jetty:jetty-http (CVE-2026-2332). Confidential information can be exposed externally. Exploitable via `GET /smuggled`. Mitigation: upgrade to `11.0.29` or later.
CVE-2026-5795 Vulnerability in privilege-escalation (CVE-2026-5795)
vulnerability in privilege-escalation (CVE-2026-5795). Confidential information can be exposed externally.
CVE-2026-1605 Vulnerability in eclipse (CVE-2026-1605)
vulnerability in eclipse (CVE-2026-1605). Risk of unauthorized operations or information disclosure.
CVE-2023-44487 KEV [KEV] Vulnerability in Ietf golang.org/x/net (CVE-2023-44487)
vulnerability in Ietf golang.org/x/net (CVE-2023-44487). Risk of unauthorized operations or information disclosure. Exploitable via ``Channel``. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `0.17.0` or later.
CVE-2017-9735 Vulnerability in eclipse (CVE-2017-9735)
vulnerability in eclipse (CVE-2017-9735). Confidential information can be exposed externally.
CVE-2016-4800 Vulnerability in eclipse (CVE-2016-4800)
vulnerability in eclipse (CVE-2016-4800). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →