org.eclipse.jetty:jetty-server
Jetty Server Artifact
Security Advisories for org.eclipse.jetty:jetty-server in maven
High
27 days ago
Eclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requests
maven
org.eclipse.jetty:jetty-server
Moderate
27 days ago
Eclipse Jetty: HTTP Authority/Host mismatch
maven
org.eclipse.jetty:jetty-server
Moderate
27 days ago
Eclipse Jetty: Cross-Request Leakage for trailers on HTTP/1.1 keep-alive connections
maven
org.eclipse.jetty:jetty-server
High
6 months ago
The Eclipse Jetty Server Artifact has a Gzip request memory leak
maven
org.eclipse.jetty:jetty-server
Potential
High
12 months ago
Eclipse Jetty affected by MadeYouReset HTTP/2 vulnerability
maven
org.eclipse.jetty.http2:jetty-http2-common, org.eclipse.jetty.http2:http2-common
Potential
High
over 1 year ago
Eclipse Jetty HTTP/2 client can force the server to allocate a humongous byte buffer that may lead to OoM and subsequently the JVM to exit
maven
org.eclipse.jetty.http2:jetty-http2-common
High
over 1 year ago
**UNSUPPORTED WHEN ASSIGNED** GzipHandler causes part of request body to be seen as request body of a separate request
maven
org.eclipse.jetty:jetty-server
Potential
Moderate
almost 2 years ago
Eclipse Jetty URI parsing of invalid authority
maven
org.eclipse.jetty:jetty-http
Moderate
almost 2 years ago
Eclipse Jetty's ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks
maven
org.eclipse.jetty:jetty-server
Potential
Low
almost 2 years ago
Eclipse Jetty's PushSessionCacheFilter can cause remote DoS attacks
maven
org.eclipse.jetty:jetty-servlets
Potential
High
over 2 years ago
Connection leaking on idle timeout when TCP congested
maven
org.eclipse.jetty.http3:jetty-http3-common, org.eclipse.jetty.http2:jetty-http2-common, org.eclipse.jetty.http3:http3-common, org.eclipse.jetty.http2:http2-common
Moderate
over 3 years ago
OutOfMemoryError for large multipart without filename in Eclipse Jetty
maven
org.eclipse.jetty:jetty-server
Low
over 3 years ago
Eclipse Jetty's cookie parsing of quoted values can exfiltrate values from other cookies
maven
org.eclipse.jetty:jetty-server
High
about 4 years ago
Jetty SslConnection does not release pooled ByteBuffers in case of errors
maven
org.eclipse.jetty:jetty-server
Moderate
over 4 years ago
Jetty Uses Predictable Session Identifiers
maven
org.eclipse.jetty:jetty-server
Low
about 5 years ago
SessionListener can prevent a session from being invalidated breaking logout
maven
org.eclipse.jetty:jetty-server
High
over 5 years ago
Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources
maven
org.eclipse.jetty:jetty-server
Moderate
over 5 years ago
DOS vulnerability for Quoted Quality CSV headers
maven
org.eclipse.jetty:jetty-server
Moderate
over 5 years ago
Buffer not correctly recycled in Gzip Request inflation
maven
org.eclipse.jetty:jetty-server
Critical
about 6 years ago
Operation on a Resource after Expiration or Release in Jetty Server
maven
org.eclipse.jetty:jetty-server
Moderate
over 6 years ago
Unescaped exception messages in error responses in Jetty
maven
org.eclipse.jetty:jetty-server
Moderate
over 7 years ago
Information Exposure vulnerability in Eclipse Jetty
maven
org.eclipse.jetty:jetty-server
Moderate
over 7 years ago
Installation information leak in Eclipse Jetty
maven
org.eclipse.jetty:jetty-server
Moderate
over 7 years ago
Cross-site Scripting in Eclipse Jetty
maven
org.eclipse.jetty:jetty-server
High
over 7 years ago
Uncontrolled Resource Consumption in org.eclipse.jetty:jetty-server
maven
org.eclipse.jetty:jetty-server
High
almost 8 years ago
Jetty vulnerable to exposure of sensitive information to unauthenticated remote users
maven
org.eclipse.jetty:jetty-server
Critical
almost 8 years ago
Jetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling)
maven
org.eclipse.jetty:jetty-server
High
almost 8 years ago
Jetty vulnerable to cache poisoning due to inconsistent HTTP request handling (HTTP Request Smuggling)
maven
org.eclipse.jetty:jetty-server
Critical
almost 8 years ago
Jetty contains an alias issue that could allow unauthenticated remote code execution due to specially crafted request
maven
org.eclipse.jetty:jetty-server
Moderate
almost 8 years ago
Eclipse Jetty Server generates error message containing sensitive information
maven
org.eclipse.jetty:jetty-server
High
almost 8 years ago
Jetty vulnerable to exposure of sensitive information due to observable discrepancy
maven
org.eclipse.jetty:jetty-server
Critical
almost 8 years ago
Critical severity vulnerability that affects org.eclipse.jetty:jetty-server
maven
org.eclipse.jetty:jetty-server
High
almost 8 years ago
Access and integrity issue within Eclipse Jetty
maven
org.eclipse.jetty:jetty-server