at.yawk.dropwizard-nagios:dropwizard-nagios (1.0), br.com.thiaguten:umbrella-monitoring (>=0.1.0, <=1.0.0) +1235 more potentially affected by CVE-2018-12536 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.10.v20180503)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =0.1.0, =0.0.1, =1.1, =1.1, =1.1, =0.9.1, =0.0.5, =0.0.5, =0.0.5, =0.0.7 - cn.spring-up:spring-co 0.1 - cn.spring-up:spring-import 0.1 and more Source cves: CVE-2018-12536 Source advisory: OSV:GHSA-9RGV-H7X4-QW8G...

GHSA-9RGV-H7X4-QW8G Eclipse Jetty Server generates error message containing sensitive information

In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a...

com.cibuddy:karaf.assembly (1.0.0), com.github.kaitoy.sneo:giane-jetty (>=1.2.0, <=1.2.3) +117 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.7.v20120910)

org.eclipse.jetty:jetty-server MAVEN version 7.6.7.v20120910 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.cibuddy:karaf.assembly 1.0.0 - com.github.kaitoy.sneo:giane-jetty =1.2.0, =2.0.0-dp1,...

co.cask.cdap:cdap-client-tests (3.0.0), co.cask.cdap:sparkkmeans (>=2.6.3, <=3.0.6) +274 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.1.15.v20140411)

org.eclipse.jetty:jetty-server MAVEN version 8.1.15.v20140411 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - co.cask.cdap:cdap-client-tests 3.0.0 - co.cask.cdap:sparkkmeans =2.6.3, =2.6.3, =0.2.0,...

org.apache.camel:camel-cometd (>=2.9.0-rc1, <=2.9.0), org.apache.camel:camel-example-cxf (>=2.9.0-rc1, <=2.9.0) +109 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.5.3.v20111011)

org.eclipse.jetty:jetty-server MAVEN version 7.5.3.v20111011 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.apache.camel:camel-cometd =2.9.0-rc1, =2.9.0-rc1, =2.9.0-rc1, =2.9.0-rc1, =2.9.0-rc1,...

org.eclipse.jetty.aggregate:jetty-all (7.5.0.rc1), org.eclipse.jetty.aggregate:jetty-all-server (7.5.0.rc1) +43 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.5.0.rc1)

org.eclipse.jetty:jetty-server MAVEN version 7.5.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.5.0.rc1 - org.eclipse.jetty.aggregate:jetty-all-server...

com.jolira:testing-tools (1.2.5), org.apache.geronimo.assemblies:geronimo-jetty7-javaee5 (2.2.1) +155 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.2.1.v20101111)

org.eclipse.jetty:jetty-server MAVEN version 7.2.1.v20101111 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.jolira:testing-tools 1.2.5 - org.apache.geronimo.assemblies:geronimo-jetty7-javaee5...

com.azavea.geotrellis:geotrellis-jetty_2.10 (>=0.9.0-rc1, <=0.10.0-m1), com.azavea.geotrellis:geotrellis-jetty_2.11 (0.10.0-m1) +45 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.1.0.rc4)

org.eclipse.jetty:jetty-server MAVEN version 8.1.0.rc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.azavea.geotrellis:geotrellis-jetty2.10 =0.9.0-rc1, =0.8.0-rc2, =0.8.0 -...

com.yammer.dropwizard:dropwizard-client (0.2.1), com.yammer.dropwizard:dropwizard-core (0.2.1) +53 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.1.v20120215)

org.eclipse.jetty:jetty-server MAVEN version 7.6.1.v20120215 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.yammer.dropwizard:dropwizard-client 0.2.1 - com.yammer.dropwizard:dropwizard-core 0.2...

org.apache.felix:org.apache.felix.http.bundle (2.2.2), org.apache.felix:org.apache.felix.http.jetty (2.2.2) +52 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.13.v20130916)

org.eclipse.jetty:jetty-server MAVEN version 7.6.13.v20130916 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.apache.felix:org.apache.felix.http.bundle 2.2.2 -...

com.cloudhopper:ch-jetty (1.0.2), com.cloudhopper:ch-mq-remote (>=3.0.3, <=3.0.4) +57 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.14.v20131031)

org.eclipse.jetty:jetty-server MAVEN version 7.6.14.v20131031 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.cloudhopper:ch-jetty 1.0.2 - com.cloudhopper:ch-mq-remote =3.0.3,...

com.xpatterns.spark.parquet:spark-parquet-utility (1.0.0-spark1.3.1), org.akhikhl.gretty:gretty-runner-jetty7 (>=1.1.0, <=1.1.8) +62 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.15.v20140411)

org.eclipse.jetty:jetty-server MAVEN version 7.6.15.v20140411 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.xpatterns.spark.parquet:spark-parquet-utility 1.0.0-spark1.3.1 -...

com.datastax.spark:spark-cassandra-connector-demos_2.10 (>=1.0.0-rc3, <=1.0.6), com.datastax.spark:spark-cassandra-connector-java_2.10 (>=1.0.0-rc3, <=1.0.6) +111 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.8.v20121106)

org.eclipse.jetty:jetty-server MAVEN version 7.6.8.v20121106 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.datastax.spark:spark-cassandra-connector-demos2.10 =1.0.0-rc3, =1.0.0-rc3,...

com.confluex:qpid-in-a-can (0.2.0), com.propensive:rapture-extras_2.10 (>=2.0.0-m4, <=2.0.0-m9) +89 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.10.v20130312)

org.eclipse.jetty:jetty-server MAVEN version 7.6.10.v20130312 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.confluex:qpid-in-a-can 0.2.0 - com.propensive:rapture-extras2.10 =2.0.0-m4, =2.0.0-m...

org.apache.felix:org.apache.felix.http.bundle (2.2.1), org.apache.felix:org.apache.felix.http.jetty (2.2.1) +54 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.12.v20130726)

org.eclipse.jetty:jetty-server MAVEN version 7.6.12.v20130726 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.apache.felix:org.apache.felix.http.bundle 2.2.1 -...

com.ocpsoft.rewrite:rewrite-test-harness (>=1.0.0.alpha1, <=1.0.0.alpha6), de.ipk-gatersleben:edal-metadataapi (>=2.2.28, <=2.3.1) +42 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.0.0.m3)

org.eclipse.jetty:jetty-server MAVEN version 8.0.0.m3 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.ocpsoft.rewrite:rewrite-test-harness =1.0.0.alpha1, =2.2.28, =2.2.2, =2.3.1 -...

com.ocpsoft.rewrite:rewrite-test-harness (>=1.0.0.alpha7, <=1.0.0.alpha11), org.apache.asterix:asterix-installer (0.8.8-incubating) +56 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.0.0.rc0)

org.eclipse.jetty:jetty-server MAVEN version 8.0.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.ocpsoft.rewrite:rewrite-test-harness =1.0.0.alpha7, =0.2.16-incubating, =0.2.16-incubating,...

ai.grakn:grakn-bootup (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.2.0), ai.grakn:grakn-dist (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.4.1) +1424 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (>=9.3.0.v20150612, <=9.3.19.v20170502)

org.eclipse.jetty:jetty-server MAVEN version =9.3.0.v20150612, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.6.1, =0.7.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744...

cc.liloo:spark-mini (>=0.0.1, <=0.0.2), cloud.orbit:orbit-jetty (>=0.9.1, <=0.9.3) +516 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.5.v20170502)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =0.0.1, =0.9.1, =0.2.0, =0.3.2, =0.1.0, =1.2.1, =9.4.0, =1.0.3, =2.7, =2.7.1 and more Source cves: CVE-2017-9735 Source advisory: GHSA-WFCC-PFF6-RGC5...

cc.liloo:spark-mini (>=0.0.1, <=0.0.2), cloud.orbit:orbit-jetty (>=0.9.1, <=0.9.3) +516 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.5.v20180619)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =0.0.1, =0.9.1, =0.2.0, =0.3.2, =0.1.0, =1.2.1, =9.4.0, =1.0.3, =2.7, =2.7.1 and more Source cves: CVE-2017-9735 Source advisory: OSV:GHSA-WFCC-PFF6-RGC5...