Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

maven

org.eclipse.jetty:jetty-http

maven

Jetty HTTP Artifact

View on github.com · View on repo1.maven.org

Security Advisories for org.eclipse.jetty:jetty-http in maven

High
4 months ago

Jetty has HTTP Request Smuggling via Chunked Extension Quoted-String Parsing GSA_kwCzR0hTQS0zNTVoLXFtYzItd3B3Zs4ABVTu

maven org.eclipse.jetty:jetty-http
Low
6 months ago

org.eclipse.jetty:jetty-http has different parsing of invalid URIs GSA_kwCzR0hTQS13anB3LTRqNngtNnJ3aM4ABTP8

maven org.eclipse.jetty:jetty-http
Potential
High
about 1 year ago

Eclipse Jetty affected by MadeYouReset HTTP/2 vulnerability GSA_kwCzR0hTQS1tbXhtLTh3MzMtd2M0aM4ABLSz

maven org.eclipse.jetty.http2:jetty-http2-common, org.eclipse.jetty.http2:http2-common
Potential
High
over 1 year ago

Eclipse Jetty HTTP/2 client can force the server to allocate a humongous byte buffer that may lead to OoM and subsequently the JVM to exit GSA_kwCzR0hTQS04ODlqLTYzanYtcWhyOM4ABHpd

maven org.eclipse.jetty.http2:jetty-http2-common
Potential
High
over 1 year ago

**UNSUPPORTED WHEN ASSIGNED** GzipHandler causes part of request body to be seen as request body of a separate request GSA_kwCzR0hTQS1xNHJ2LWdxOTYtdzdjNc4ABHpc

maven org.eclipse.jetty:jetty-server
Moderate
almost 2 years ago

Eclipse Jetty URI parsing of invalid authority GSA_kwCzR0hTQS1xaDhnLTU4cHAtMnd4aM4ABAQY

maven org.eclipse.jetty:jetty-http
Potential
Moderate
almost 2 years ago

Eclipse Jetty's ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks GSA_kwCzR0hTQS1nOG01LTcyMnItOHdocc4ABAQX

maven org.eclipse.jetty:jetty-server
Potential
Low
almost 2 years ago

Eclipse Jetty's PushSessionCacheFilter can cause remote DoS attacks GSA_kwCzR0hTQS1yN200LWY5aDUtZ3I3Oc4ABAQW

maven org.eclipse.jetty:jetty-servlets
Potential
Moderate
almost 2 years ago

Eclipse Jetty has a denial of service vulnerability on DosFilter GSA_kwCzR0hTQS1qMjZ3LWY5cnEtbXIycc4ABAPv

maven org.eclipse.jetty:jetty-servlets, org.eclipse.jetty.ee9:jetty-ee9-servlets, org.eclipse.jetty.ee8:jetty-ee8-servlets, org.eclipse.jetty.ee10:jetty-ee10-servlets
Potential
High
over 2 years ago

Connection leaking on idle timeout when TCP congested GSA_kwCzR0hTQS1yZ2d2LWN2N3ItbXc5OM4AA5gs

maven org.eclipse.jetty.http3:jetty-http3-common, org.eclipse.jetty.http2:jetty-http2-common, org.eclipse.jetty.http3:http3-common, org.eclipse.jetty.http2:http2-common
Moderate
almost 3 years ago

Jetty accepts "+" prefixed value in Content-Length GSA_kwCzR0hTQS1obXI3LW00OGctNDhmNs4AA13o

maven org.eclipse.jetty:jetty-http
Low
about 4 years ago

Jetty invalid URI parsing may produce invalid HttpURI.authority GSA_kwCzR0hTQS1jajd2LTI3cGctd2Y3cc4AAtJM

maven org.eclipse.jetty:jetty-http

Filter by Severity

High 5 Moderate 4 Low 3