jetty_9.4.31_CVE-2023-26048

Eclipse Jetty Canonical Repository This is the canonical repository for the Jetty project, feel free to fork and contribute now! Submitting a patch or pull request? Make sure you have an Eclipse Contributor Agreement ECA on file. eclipse.org/legal/ecafaq Project description Jetty is a lightweight...

jetty_9.4.31_CVE-2021-34428

Eclipse Jetty Canonical Repository This is the canonical repository for the Jetty project, feel free to fork and contribute now! Submitting a patch or pull request? Make sure you have an Eclipse Contributor Agreement ECA on file. eclipse.org/legal/ecafaq Project description Jetty is a lightweight...

CVE-2021-34429

CVE-2021-34429 POC for CVE-2021-34429 - Eclipse Jetty 11.0.5 Sensitive File Disclosure Using Encoded URIs to access files inside WEB-INF directory Setting up the testing Environment Prequistics: Installing docker and docker-compose on your system For debain based distros ex. Ubuntu, Kali Linux et...

Eclipse Jetty - Information Disclosure

Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224 is susceptible to improper authorization. The default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. An attacker can access sensitive information regarding...

CLEANSTART-2026-FM38692 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

Security vulnerability affects the solr package. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes...

CLEANSTART-2026-RI65917 In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the request path in context

Security vulnerability affects the strimzi-kafka-operator package. In Eclipse Jetty, TryPathsHandler and TryFilesFilter can be configured to forward requests to template URIs such as index?p=$path, where $path is the request path in context...

CLEANSTART-2026-JX34186 In Eclipse Jetty, across various versions of `jetty-server`, and `jetty-proxy`, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case

Security vulnerability affects the strimzi-kafka-operator package. In Eclipse Jetty, across various versions of jetty-server, and jetty-proxy, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case...

CLEANSTART-2026-EP54530 In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority (host and port) matches what provided in the Host header (if present)

Security vulnerability affects the trino package. In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host header if present...

CLEANSTART-2026-KS77183 Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine

Security vulnerability affects the trino package. Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine...

CLEANSTART-2026-OX74657 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

Security vulnerability affects the trino package. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes...

CVE-2026-18661

A flaw was found in Eclipse Jetty. This vulnerability allows a remote, unauthenticated attacker to bypass access controls, leading to unauthorized information disclosure and potential data modification. When an application combines servlet security annotations with deployment descriptor...

Eclipse Jetty - Information Disclosure

Eclipse Jetty 9.4.37-9.4.42, 10.0.1-10.0.5 and 11.0.1-11.0.5 are susceptible to improper authorization. URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. An attacker can potentially obtain sensitive informatio...

Security Bulletin:Vulnerabilities exists in NPS of IBM Netezza Appliance

Summary Vulnerabilities identified in NPS of IBM Netezza Appliance have been addressed in version 11.3.1.3-IF3. Vulnerability Details CVEID:CVE-2026-13204 DESCRIPTION: If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of...

CLEANSTART-2024-CK30035 Eclipse Jetty provides a web server and servlet container

Security vulnerability affects the jetty-runner package. Eclipse Jetty provides a web server and servlet container...

CLEANSTART-2026-SX41673 In Eclipse Jetty, an HTTP URI of this form: /public;/

CVE-2026-8384 affects multiple packages. In Eclipse Jetty, an HTTP URI of this form: /public;/. See references for individual vulnerability details...

CLEANSTART-2026-BP89495 In Eclipse Jetty, a first HTTP/1

CVE-2026-10051 affects multiple packages. In Eclipse Jetty, a first HTTP/1. See references for individual vulnerability details...

CLEANSTART-2026-TF73196 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

CVE-2026-10050 affects multiple packages. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. See references for individual vulnerability details...

CLEANSTART-2026-KT08893 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

Security vulnerability affects the apache-zookeeper package. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes...

CLEANSTART-2026-KJ30413 In Eclipse Jetty, the HTTP/1

Security vulnerability affects the apache-zookeeper package. In Eclipse Jetty, the HTTP/1...

CLEANSTART-2026-TG09291 Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine

CVE-2024-6763 affects multiple packages. Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine. See references for individual vulnerability details...