com.yammer.dropwizard:dropwizard-client (0.1.2), com.yammer.dropwizard:dropwizard-core (0.1.2) +51 more potentially affected by CVE-2017-7658 via org.eclipse.jetty:jetty-server (7.6.0.rc3)

org.eclipse.jetty:jetty-server MAVEN version 7.6.0.rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.yammer.dropwizard:dropwizard-client 0.1.2 - com.yammer.dropwizard:dropwizard-core 0.1.2 -...

com.hmsonline:hms-cassandra-rest (>=0.15.0, <=1.0.0), com.hmsonline:virgil (>=0.16.0, <=1.0.1) +53 more potentially affected by CVE-2017-7658 via org.eclipse.jetty:jetty-server (7.6.0.rc4)

org.eclipse.jetty:jetty-server MAVEN version 7.6.0.rc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.hmsonline:hms-cassandra-rest =0.15.0, =0.16.0, =1.0.1 -...

com.github.jep42:robotframework-easycsvmap-remoteserver (>=0.0.2, <=0.0.5), com.github.jep42:robotframework-formatcompare-remoteserver (>=0.0.2, <=0.0.3) +63 more potentially affected by CVE-2017-7658 via org.eclipse.jetty:jetty-server (7.6.3.v20120416)

org.eclipse.jetty:jetty-server MAVEN version 7.6.3.v20120416 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.github.jep42:robotframework-easycsvmap-remoteserver =0.0.2, =0.0.2, =2.0-beta, =0.18,...

org.codehaus.cargo:cargo-jetty-7-and-onwards-deployer (1.2.3), org.cometd.java:cometd-java-examples (>=2.4.3, <=2.5.0-beta2) +51 more potentially affected by CVE-2017-7658 via org.eclipse.jetty:jetty-server (7.6.4.v20120524)

org.eclipse.jetty:jetty-server MAVEN version 7.6.4.v20120524 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.codehaus.cargo:cargo-jetty-7-and-onwards-deployer 1.2.3 -...

net.peachjean.modularwebapp:modularwebapp (1.0.0), org.apache.jena:jena-fuseki (0.2.5) +53 more potentially affected by CVE-2017-7658 via org.eclipse.jetty:jetty-server (7.6.5.v20120716)

org.eclipse.jetty:jetty-server MAVEN version 7.6.5.v20120716 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - net.peachjean.modularwebapp:modularwebapp 1.0.0 - org.apache.jena:jena-fuseki 0.2.5 -...

org.eclipse.jetty.aggregate:jetty-all (8.1.0.rc2), org.eclipse.jetty.aggregate:jetty-all-server (8.1.0.rc2) +42 more potentially affected by CVE-2017-7658 via org.eclipse.jetty:jetty-server (8.1.0.rc2)

org.eclipse.jetty:jetty-server MAVEN version 8.1.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.1.0.rc2 - org.eclipse.jetty.aggregate:jetty-all-server...

com.yammer.dropwizard:dropwizard-client (0.2.1), com.yammer.dropwizard:dropwizard-core (0.2.1) +53 more potentially affected by CVE-2017-7658 via org.eclipse.jetty:jetty-server (7.6.1.v20120215)

org.eclipse.jetty:jetty-server MAVEN version 7.6.1.v20120215 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.yammer.dropwizard:dropwizard-client 0.2.1 - com.yammer.dropwizard:dropwizard-core 0.2...

com.jolira.enzian:app (>=1.0.1, <=1.0.12), com.jolira.enzian:tasks (>=1.0.7, <=1.0.12) +106 more potentially affected by CVE-2017-7658 via org.eclipse.jetty:jetty-server (7.1.6.v20100715)

org.eclipse.jetty:jetty-server MAVEN version 7.1.6.v20100715 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.jolira.enzian:app =1.0.1, =1.0.7, =0.9.9.5-unofficial-roberto-release, =2.6, =0.44,...

org.cometd.java:cometd-examples-java (1.0.beta10), org.cometd.java:cometd-java-oort (1.0.beta10) +29 more potentially affected by CVE-2017-7658 via org.eclipse.jetty:jetty-server (7.0.0.m4)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.cometd.java:cometd-examples-java 1.0.beta10 - org.cometd.java:cometd-java-oort 1.0.beta10 -...

GHSA-6X9X-8QW9-9PP6 Jetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling)

Eclipse Jetty Server versions 9.2.x and older, 9.3.x all non HTTP/1.x configurations, and 9.4.x all HTTP/1.x configurations, are vulnerable to HTTP Request Smuggling when presented with two content-lengths headers, allowing authorization bypass. When presented with a content-length and a chunked...

io.restx:restx-server-jetty7 (>=0.35-rc1, <=0.35.1), org.codehaus.cargo:cargo-jetty-7-and-onwards-deployer (>=1.6.8, <=1.8.2) +41 more potentially affected by CVE-2017-7658 via org.eclipse.jetty:jetty-server (7.6.21.v20160908)

org.eclipse.jetty:jetty-server MAVEN version 7.6.21.v20160908 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - io.restx:restx-server-jetty7 =0.35-rc1, =1.6.8, =1.8.3, =1.9.4 -...

com.yammer.dropwizard:dropwizard-client (0.1.1), com.yammer.dropwizard:dropwizard-core (0.1.1) +50 more potentially affected by CVE-2017-7658 via org.eclipse.jetty:jetty-server (7.6.0.rc2)

org.eclipse.jetty:jetty-server MAVEN version 7.6.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.yammer.dropwizard:dropwizard-client 0.1.1 - com.yammer.dropwizard:dropwizard-core 0.1.1 -...

ai.h2o:h2o-algos (>=3.0.1.2, <=3.22.0.5), ai.h2o:h2o-app (>=3.0.1.2, <=3.22.0.5) +153 more potentially affected by CVE-2017-7658 via org.eclipse.jetty:jetty-server (8.1.17.v20150415)

org.eclipse.jetty:jetty-server MAVEN version 8.1.17.v20150415 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - ai.h2o:h2o-algos =3.0.1.2, =3.0.1.2, =3.12.0.1, =3.8.2.4, =3.0.1.2, =3.14.0.7, =3.16.0.1...

com.qualinsight.plugins.jetty:qualinsight-plugins-jetty-7.6.x (>=1.0.1, <=1.0.2), org.codehaus.cargo:cargo-jetty-7-and-onwards-deployer (>=1.4.15, <=1.6.7) +39 more potentially affected by CVE-2017-7658 via org.eclipse.jetty:jetty-server (7.6.17.v20150415)

org.eclipse.jetty:jetty-server MAVEN version 7.6.17.v20150415 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.qualinsight.plugins.jetty:qualinsight-plugins-jetty-7.6.x =1.0.1, =1.4.15, =1.6.7 -...

net.peachjean.modularwebapp:modularwebapp (1.0.0), org.apache.jena:jena-fuseki (0.2.5) +53 more potentially affected by CVE-2017-7656 via org.eclipse.jetty:jetty-server (7.6.5.v20120716)

org.eclipse.jetty:jetty-server MAVEN version 7.6.5.v20120716 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - net.peachjean.modularwebapp:modularwebapp 1.0.0 - org.apache.jena:jena-fuseki 0.2.5 -...

org.eclipse.jetty.aggregate:jetty-all (7.5.2.v20111006), org.eclipse.jetty.aggregate:jetty-all-server (7.5.2.v20111006) +43 more potentially affected by CVE-2017-7656 via org.eclipse.jetty:jetty-server (7.5.2.v20111006)

org.eclipse.jetty:jetty-server MAVEN version 7.5.2.v20111006 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.5.2.v20111006 -...

org.apache.felix:org.apache.felix.http.bundle (2.2.1), org.apache.felix:org.apache.felix.http.jetty (2.2.1) +54 more potentially affected by CVE-2017-7656 via org.eclipse.jetty:jetty-server (7.6.12.v20130726)

org.eclipse.jetty:jetty-server MAVEN version 7.6.12.v20130726 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.apache.felix:org.apache.felix.http.bundle 2.2.1 -...

com.bacoder.jgit:org.eclipse.jgit.junit.http (>=3.1.0-201308312337-r, <=3.1.0-201309071158-r), org.apache.tapestry:tapestry-runner (>=5.4-beta-3, <=5.4.5) +57 more potentially affected by CVE-2017-7656 via org.eclipse.jetty:jetty-server (7.6.11.v20130520)

org.eclipse.jetty:jetty-server MAVEN version 7.6.11.v20130520 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.bacoder.jgit:org.eclipse.jgit.junit.http =3.1.0-201308312337-r, =5.4-beta-3,...

com.cloudhopper:ch-jetty (1.0.2), com.cloudhopper:ch-mq-remote (>=3.0.3, <=3.0.4) +57 more potentially affected by CVE-2017-7656 via org.eclipse.jetty:jetty-server (7.6.14.v20131031)

org.eclipse.jetty:jetty-server MAVEN version 7.6.14.v20131031 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.cloudhopper:ch-jetty 1.0.2 - com.cloudhopper:ch-mq-remote =3.0.3,...

com.xpatterns.spark.parquet:spark-parquet-utility (1.0.0-spark1.3.1), org.akhikhl.gretty:gretty-runner-jetty7 (>=1.1.0, <=1.1.8) +62 more potentially affected by CVE-2017-7656 via org.eclipse.jetty:jetty-server (7.6.15.v20140411)

org.eclipse.jetty:jetty-server MAVEN version 7.6.15.v20140411 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.xpatterns.spark.parquet:spark-parquet-utility 1.0.0-spark1.3.1 -...