ai.pipestream:pipestream-wiremock-server (>=0.1.7, <=0.1.8), com.blazemeter.jmeter:jmeter-bzm-http2 (>=3.0.0, <=3.0.1) +695 more potentially affected by CVE-2026-12611 via org.eclipse.jetty.http2:jetty-http2-common (>=12.1.0, <=12.1.9)

org.eclipse.jetty.http2:jetty-http2-common MAVEN version =12.1.0, =0.1.7, =3.0.0, =8.0.0, =3.0.0, =2.4.2, =5.0.0, =3.0.0-beta, =4.2.4, =4.2.4, =2.10.0, =0.2.0, =0.2.0, =0.2.0, =0.4.0 and more Source cves: CVE-2026-12611 Source advisory: SNYK:JAVA-ORGECLIPSEJETTYHTTP2-19653589...

biz.netcentric.cq.tools.accesscontroltool:sling-maximum-version-environment (>=4.2.0, <=4.2.4), com.atlan:package-toolkit-testing (>=5.3.1, <=7.4.1) +1033 more potentially affected by CVE-2026-12611 via org.eclipse.jetty.http2:jetty-http2-common (>=12.0.0.alpha0, <=12.0.36)

org.eclipse.jetty.http2:jetty-http2-common MAVEN version =12.0.0.alpha0, =4.2.0, =5.3.1, =2.6.0-rc1, =2.0.0, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.230 and more Source cves: CVE-2026-12611 Source advisory: SNYK:JAVA-ORGECLIPSEJETTYHTTP2-19653589...

EUVD-2026-72733

A client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are never unblocked, eventually causing all threads to be blocked and the whole server to become unresponsive. This is caused by a race condition in the server when handling RSTSTREAM frames and GOAWAY frames...

biz.netcentric.cq.tools.accesscontroltool:sling-maximum-version-environment (>=4.2.0, <=4.2.4), com.atlan:package-toolkit-testing (>=5.3.1, <=7.4.1) +1039 more potentially affected by CVE-2026-12611 via org.eclipse.jetty.http2:jetty-http2-common (>=12.0.0.alpha0, <=12.0.37)

org.eclipse.jetty.http2:jetty-http2-common MAVEN version =12.0.0.alpha0, =4.2.0, =5.3.1, =2.6.0-rc1, =2.0.0, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.230 and more Source cves: CVE-2026-12611 Source advisory: MEND:CVE-2026-12611...

ai.pipestream:pipestream-wiremock-server (>=0.1.7, <=0.1.8), com.blazemeter.jmeter:jmeter-bzm-http2 (>=3.0.0, <=3.0.1) +756 more potentially affected by CVE-2026-12611 via org.eclipse.jetty.http2:jetty-http2-common (>=12.1.0.alpha0, <=12.1.10)

org.eclipse.jetty.http2:jetty-http2-common MAVEN version =12.1.0.alpha0, =0.1.7, =3.0.0, =8.0.0, =3.0.0, =2.4.2, =1.1.20, =5.0.0, =3.0.0-beta, =4.2.4, =4.2.4, =2.10.0, =0.11.0, =0.2.0, =0.6.0 and more Source cves: CVE-2026-12611 Source advisory: MEND:CVE-2026-12611...

ROOT-APP-MAVEN-CVE-2025-5115 CVE-2025-5115 in org.eclipse.jetty.http2:jetty-http2-common - Patched by Root

Root has patched CVE-2025-5115 in the org.eclipse.jetty.http2:jetty-http2-common package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-1948 CVE-2025-1948 in org.eclipse.jetty.http2:jetty-http2-common - Patched by Root

Root has patched CVE-2025-1948 in the org.eclipse.jetty.http2:jetty-http2-common package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-22201 CVE-2024-22201 in org.eclipse.jetty.http2:jetty-http2-common - Patched by Root

Root has patched CVE-2024-22201 in the org.eclipse.jetty.http2:jetty-http2-common package for Root:Maven. Multiple fixed versions available...

io.airlift:discovery (324), io.airlift:http-client (324) +13 more potentially affected by CVE-2025-5115 via org.eclipse.jetty.http2:jetty-http2-common (>=12.1.0.alpha0, <=12.1.0.beta2)

org.eclipse.jetty.http2:jetty-http2-common MAVEN version =12.1.0.alpha0, =12.1.0.alpha2, =12.1.0.alpha0, =12.1.0.alpha0, =12.1.0.alpha0, =12.1.0.alpha0, =12.1.0.alpha0, =12.1.0.beta2 Source cves: CVE-2025-5115 Source advisory: GHSA-MMXM-8W33-WC4H...

io.airlift:http-server (324), io.airlift:jmx-http (324) +5 more potentially affected by CVE-2025-5115 via org.eclipse.jetty.http2:jetty-http2-server (>=12.1.0.alpha0, <=12.1.0.beta2)

org.eclipse.jetty.http2:jetty-http2-server MAVEN version =12.1.0.alpha0, =12.1.0.alpha2, =12.1.0.alpha0, =12.1.0.alpha0, =12.1.0.beta2 Source cves: CVE-2025-5115 Source advisory: SNYK:JAVA-ORGECLIPSEJETTYHTTP2-12047652...

io.airlift:discovery (324), io.airlift:http-client (324) +13 more potentially affected by CVE-2025-5115 via org.eclipse.jetty.http2:jetty-http2-common (>=12.1.0.alpha0, <=12.1.0.beta2)

org.eclipse.jetty.http2:jetty-http2-common MAVEN version =12.1.0.alpha0, =12.1.0.alpha2, =12.1.0.alpha0, =12.1.0.alpha0, =12.1.0.alpha0, =12.1.0.alpha0, =12.1.0.alpha0, =12.1.0.beta2 Source cves: CVE-2025-5115 Source advisory: SNYK:JAVA-ORGECLIPSEJETTYHTTP2-12047664...

com.atlan:package-toolkit-testing (>=5.3.1, <=6.1.2), com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv5 (>=2.6.0-rc1, <=2.8.0) +826 more potentially affected by CVE-2025-5115 via org.eclipse.jetty.http2:jetty-http2-server (>=12.0.0.alpha0, <=12.0.24)

org.eclipse.jetty.http2:jetty-http2-server MAVEN version =12.0.0.alpha0, =5.3.1, =2.6.0-rc1, =2.0.0, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.295, =0.295, =0.295, =0.295, =0.296 and more Source cves: CVE-2025-5115 Source advisory: SNYK:JAVA-ORGECLIPSEJETTYHTTP2-12047652...

com.atlan:package-toolkit-testing (>=5.3.1, <=6.1.2), com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv5 (>=2.6.0-rc1, <=2.8.0) +951 more potentially affected by CVE-2025-5115 via org.eclipse.jetty.http2:jetty-http2-common (>=12.0.0, <=12.0.24)

org.eclipse.jetty.http2:jetty-http2-common MAVEN version =12.0.0, =5.3.1, =2.6.0-rc1, =2.0.0, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.223 and more Source cves: CVE-2025-5115 Source advisory: OSV:GHSA-MMXM-8W33-WC4H...

com.atlan:package-toolkit-testing (>=5.3.1, <=6.1.2), com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv5 (>=2.6.0-rc1, <=2.8.0) +953 more potentially affected by CVE-2025-5115 via org.eclipse.jetty.http2:jetty-http2-common (>=12.0.0.alpha0, <=12.0.24)

org.eclipse.jetty.http2:jetty-http2-common MAVEN version =12.0.0.alpha0, =5.3.1, =2.6.0-rc1, =2.0.0, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.223 and more Source cves: CVE-2025-5115 Source advisory: SNYK:JAVA-ORGECLIPSEJETTYHTTP2-12047664...

io.airlift:discovery (324), io.airlift:http-client (324) +13 more potentially affected by CVE-2025-5115 via org.eclipse.jetty.http2:jetty-http2-common (>=12.1.0.alpha0, <=12.1.0.beta2)

org.eclipse.jetty.http2:jetty-http2-common MAVEN version =12.1.0.alpha0, =12.1.0.alpha2, =12.1.0.alpha0, =12.1.0.alpha0, =12.1.0.alpha0, =12.1.0.alpha0, =12.1.0.alpha0, =12.1.0.beta2 Source cves: CVE-2025-5115 Source advisory: OSV:GHSA-MMXM-8W33-WC4H...

com.atlan:package-toolkit-testing (>=5.3.1, <=6.1.2), com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv5 (>=2.6.0-rc1, <=2.8.0) +951 more potentially affected by CVE-2025-5115 via org.eclipse.jetty.http2:jetty-http2-common (>=12.0.0, <=12.0.24)

org.eclipse.jetty.http2:jetty-http2-common MAVEN version =12.0.0, =5.3.1, =2.6.0-rc1, =2.0.0, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.223 and more Source cves: CVE-2025-5115 Source advisory: GHSA-MMXM-8W33-WC4H...

io.airlift:discovery (324), io.airlift:http-client (324) +13 more potentially affected by CVE-2025-5115 via org.eclipse.jetty.http2:jetty-http2-common (>=12.1.0.alpha0, <=12.1.0.beta2)

org.eclipse.jetty.http2:jetty-http2-common MAVEN version =12.1.0.alpha0, =12.1.0.alpha2, =12.1.0.alpha0, =12.1.0.alpha0, =12.1.0.alpha0, =12.1.0.alpha0, =12.1.0.alpha0, =12.1.0.beta2 Source cves: CVE-2025-5115 Source advisory: MEND:CVE-2025-5115...

com.atlan:package-toolkit-testing (>=5.3.1, <=6.1.2), com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv5 (>=2.6.0-rc1, <=2.8.0) +951 more potentially affected by CVE-2025-5115 via org.eclipse.jetty.http2:jetty-http2-common (>=12.0.0, <=12.0.24)

org.eclipse.jetty.http2:jetty-http2-common MAVEN version =12.0.0, =5.3.1, =2.6.0-rc1, =2.0.0, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.217, =0.223 and more Source cves: CVE-2025-5115 Source advisory: MEND:CVE-2025-5115...

com.atlan:package-toolkit-testing (>=5.3.1, <=6.1.2), com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv5 (>=2.6.0-rc1, <=2.8.0) +790 more potentially affected by CVE-2025-1948 via org.eclipse.jetty.http2:jetty-http2-hpack (>=12.0.0, <=12.0.16)

org.eclipse.jetty.http2:jetty-http2-hpack MAVEN version =12.0.0, =5.3.1, =2.6.0-rc1, =1.40.16, =1.1.18, =2.0.20, =3.0.0, =3.0.2, =3.0.0, =4.0.0-b1, =4.0.0-b1, =4.0.0-b1, =4.0.0-a1, =4.0.0-a1, =4.0.0-a1, =0.4.0, =0.6.0 and more Source cves: CVE-2025-1948 Source advisory:...

com.atlan:package-toolkit-testing (>=5.3.1, <=6.1.2), com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv5 (>=2.6.0-rc1, <=2.8.0) +789 more potentially affected by CVE-2025-1948 via org.eclipse.jetty.http2:jetty-http2-common (>=12.0.0, <=12.0.16)

org.eclipse.jetty.http2:jetty-http2-common MAVEN version =12.0.0, =5.3.1, =2.6.0-rc1, =1.40.16, =1.1.18, =2.0.20, =3.0.0, =3.0.2, =3.0.0, =4.0.0-b1, =4.0.0-b1, =4.0.0-b1, =4.0.0-a1, =4.0.0-a1, =4.0.0-a1, =0.4.0, =0.6.0 and more Source cves: CVE-2025-1948 Source advisory: GHSA-889J-63JV-QHR8...