com.datastax.spark:spark-cassandra-connector-demos_2.10 (>=1.0.0-rc3, <=1.0.6), com.datastax.spark:spark-cassandra-connector-java_2.10 (>=1.0.0-rc3, <=1.0.6) +111 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.8.v20121106)

org.eclipse.jetty:jetty-server MAVEN version 7.6.8.v20121106 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.datastax.spark:spark-cassandra-connector-demos2.10 =1.0.0-rc3, =1.0.0-rc3,...

com.jolira:testing-tools (1.2.5), org.apache.geronimo.assemblies:geronimo-jetty7-javaee5 (2.2.1) +155 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.2.1.v20101111)

org.eclipse.jetty:jetty-server MAVEN version 7.2.1.v20101111 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.jolira:testing-tools 1.2.5 - org.apache.geronimo.assemblies:geronimo-jetty7-javaee5...

org.apache.felix:org.apache.felix.http.bundle (2.2.1), org.apache.felix:org.apache.felix.http.jetty (2.2.1) +54 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.12.v20130726)

org.eclipse.jetty:jetty-server MAVEN version 7.6.12.v20130726 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.apache.felix:org.apache.felix.http.bundle 2.2.1 -...

com.hmsonline:hms-cassandra-rest (>=0.15.0, <=1.0.0), com.hmsonline:virgil (>=0.16.0, <=1.0.1) +53 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.0.rc4)

org.eclipse.jetty:jetty-server MAVEN version 7.6.0.rc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.hmsonline:hms-cassandra-rest =0.15.0, =0.16.0, =1.0.1 -...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc6), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc6) +32 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.0.0.rc6)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.rc6 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc6 - org.eclipse.jetty.aggregate:jetty-all-server...

com.qualinsight.plugins.jetty:qualinsight-plugins-jetty-7.6.x (>=1.0.1, <=1.0.2), org.codehaus.cargo:cargo-jetty-7-and-onwards-deployer (>=1.4.15, <=1.6.7) +39 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.17.v20150415)

org.eclipse.jetty:jetty-server MAVEN version 7.6.17.v20150415 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.qualinsight.plugins.jetty:qualinsight-plugins-jetty-7.6.x =1.0.1, =1.4.15, =1.6.7 -...

com.github.rest-driver:rest-client-driver (1.1.15), com.proofpoint.discovery:discovery-elb (1.1) +60 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.0.3.v20111011)

org.eclipse.jetty:jetty-server MAVEN version 8.0.3.v20111011 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.github.rest-driver:rest-client-driver 1.1.15 - com.proofpoint.discovery:discovery-elb...

org.eclipse.jetty.aggregate:jetty-all (8.1.0.rc1), org.eclipse.jetty.aggregate:jetty-all-server (8.1.0.rc1) +42 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.1.0.rc1)

org.eclipse.jetty:jetty-server MAVEN version 8.1.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.1.0.rc1 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc3), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc3) +29 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.0.0.rc3)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc3 - org.eclipse.jetty.aggregate:jetty-all-server...

co.cask.cdap:cdap-client-tests (3.0.0), co.cask.cdap:sparkkmeans (>=2.6.3, <=3.0.6) +274 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.1.15.v20140411)

org.eclipse.jetty:jetty-server MAVEN version 8.1.15.v20140411 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - co.cask.cdap:cdap-client-tests 3.0.0 - co.cask.cdap:sparkkmeans =2.6.3, =2.6.3, =0.2.0,...

org.apache.camel:camel-cometd (>=2.9.0-rc1, <=2.9.0), org.apache.camel:camel-example-cxf (>=2.9.0-rc1, <=2.9.0) +109 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.5.3.v20111011)

org.eclipse.jetty:jetty-server MAVEN version 7.5.3.v20111011 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.apache.camel:camel-cometd =2.9.0-rc1, =2.9.0-rc1, =2.9.0-rc1, =2.9.0-rc1, =2.9.0-rc1,...

GHSA-WFCC-PFF6-RGC5 Jetty vulnerable to exposure of sensitive information due to observable discrepancy

Jetty through 9.4.x contains a timing channel attack in util/security/Password.java, which allows attackers to obtain access by observing elapsed times before rejection of incorrect passwords...

org.eclipse.jetty.aggregate:jetty-all (7.6.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.6.0.rc0) +45 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.0.rc0)

org.eclipse.jetty:jetty-server MAVEN version 7.6.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.6.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

org.cometd.java:cometd-examples-java (1.0.beta10), org.cometd.java:cometd-java-oort (1.0.beta10) +29 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.0.0.m4)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.cometd.java:cometd-examples-java 1.0.beta10 - org.cometd.java:cometd-java-oort 1.0.beta10 -...

cn.dreampie:resty-server (1.3.0.release), com.enioka.jqm:jqm-engine (>=1.3.6, <=1.4.2) +91 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.1.19.v20160209)

org.eclipse.jetty:jetty-server MAVEN version 8.1.19.v20160209 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - cn.dreampie:resty-server 1.3.0.release - com.enioka.jqm:jqm-engine =1.3.6, =1.3.6, =1.0....

ai.h2o:h2o-app (>=3.22.1.1, <=3.30.0.6), ai.h2o:h2o-jetty-8 (>=3.22.1.1, <=3.30.0.6) +41 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.1.21.v20160908)

org.eclipse.jetty:jetty-server MAVEN version 8.1.21.v20160908 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - ai.h2o:h2o-app =3.22.1.1, =3.22.1.1, =2.1.47, =2.1.47, =2.1.47, =2.1.47, =0.1.2, =0.1.3 ...

cc.liloo:spark-mini (>=0.0.1, <=0.0.2), cloud.orbit:orbit-jetty (>=0.9.1, <=0.9.3) +516 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.5.v20170502)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =0.0.1, =0.9.1, =0.2.0, =0.3.2, =0.1.0, =1.2.1, =9.4.0, =1.0.3, =2.7, =2.7.1 and more Source cves: CVE-2017-9735 Source advisory: GHSA-WFCC-PFF6-RGC5...

ai.grakn:grakn-bootup (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.2.0), ai.grakn:grakn-dist (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.4.1) +1424 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (>=9.3.0.v20150612, <=9.3.19.v20170502)

org.eclipse.jetty:jetty-server MAVEN version =9.3.0.v20150612, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.6.1, =0.7.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744...

cc.liloo:spark-mini (>=0.0.1, <=0.0.2), cloud.orbit:orbit-jetty (>=0.9.1, <=0.9.3) +516 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.5.v20180619)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =0.0.1, =0.9.1, =0.2.0, =0.3.2, =0.1.0, =1.2.1, =9.4.0, =1.0.3, =2.7, =2.7.1 and more Source cves: CVE-2017-9735 Source advisory: OSV:GHSA-WFCC-PFF6-RGC5...

com.gitee.zhuimengshaonian:jfast (>=1.0, <=1.1), com.github.angelndevil2:universal-jvm-agent (0.0.3) +40 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.1.18.v20150929)

org.eclipse.jetty:jetty-server MAVEN version 8.1.18.v20150929 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.gitee.zhuimengshaonian:jfast =1.0, =2.4.4, =0.2.2, =0.2.3 -...