org.eclipse.jetty.aggregate:jetty-all (7.4.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.4.0.rc0) +40 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.4.0.rc0)

org.eclipse.jetty:jetty-server MAVEN version 7.4.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.4.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

org.atmosphere.plugins:atmosphere-grizzly-adapter (>=0.6, <=0.6.5), org.atmosphere.samples:atmosphere-appengine-chat (>=0.6, <=0.6.5) +63 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.1.1.v20100517)

org.eclipse.jetty:jetty-server MAVEN version 7.1.1.v20100517 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.atmosphere.plugins:atmosphere-grizzly-adapter =0.6, =0.6, =0.6, =0.6, =0.6, =0.6, =0....

cn.dreampie:resty-server (1.3.0.release), com.enioka.jqm:jqm-engine (>=1.3.6, <=1.4.2) +91 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.1.19.v20160209)

org.eclipse.jetty:jetty-server MAVEN version 8.1.19.v20160209 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - cn.dreampie:resty-server 1.3.0.release - com.enioka.jqm:jqm-engine =1.3.6, =1.3.6, =1.0....

ai.h2o:h2o-app (>=3.22.1.1, <=3.30.0.6), ai.h2o:h2o-jetty-8 (>=3.22.1.1, <=3.30.0.6) +41 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.1.21.v20160908)

org.eclipse.jetty:jetty-server MAVEN version 8.1.21.v20160908 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - ai.h2o:h2o-app =3.22.1.1, =3.22.1.1, =2.1.47, =2.1.47, =2.1.47, =2.1.47, =0.1.2, =0.1.3 ...

cc.liloo:spark-mini (>=0.0.1, <=0.0.2), cloud.orbit:orbit-jetty (>=0.9.1, <=0.9.3) +516 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.5.v20170502)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =0.0.1, =0.9.1, =0.2.0, =0.3.2, =0.1.0, =1.2.1, =9.4.0, =1.0.3, =2.7, =2.7.1 and more Source cves: CVE-2017-9735 Source advisory: GHSA-WFCC-PFF6-RGC5...

ai.grakn:grakn-bootup (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.2.0), ai.grakn:grakn-dist (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.4.1) +1424 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (>=9.3.0.v20150612, <=9.3.19.v20170502)

org.eclipse.jetty:jetty-server MAVEN version =9.3.0.v20150612, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =0.6.1, =0.7.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744...

ai.h2o:h2o-jetty-8 (>=3.30.0.7, <=3.46.0.12), com.alibaba.jvm.sandbox:sandbox-core (>=1.0.11, <=1.0.15) +72 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.2.0.v20160908)

org.eclipse.jetty:jetty-server MAVEN version 8.2.0.v20160908 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - ai.h2o:h2o-jetty-8 =3.30.0.7, =1.0.11, =1.0.0, =2.0.0, =2.3.0, =1.30.4, =1.30.4,...

cc.liloo:spark-mini (>=0.0.1, <=0.0.2), cloud.orbit:orbit-jetty (>=0.9.1, <=0.9.3) +516 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.5.v20180619)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =0.0.1, =0.9.1, =0.2.0, =0.3.2, =0.1.0, =1.2.1, =9.4.0, =1.0.3, =2.7, =2.7.1 and more Source cves: CVE-2017-9735 Source advisory: OSV:GHSA-WFCC-PFF6-RGC5...

com.gitee.zhuimengshaonian:jfast (>=1.0, <=1.1), com.github.angelndevil2:universal-jvm-agent (0.0.3) +40 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.1.18.v20150929)

org.eclipse.jetty:jetty-server MAVEN version 8.1.18.v20150929 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.gitee.zhuimengshaonian:jfast =1.0, =2.4.4, =0.2.2, =0.2.3 -...

com.ocpsoft.rewrite:rewrite-test-harness (>=1.0.0.alpha7, <=1.0.0.alpha11), org.apache.asterix:asterix-installer (0.8.8-incubating) +56 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.0.0.rc0)

org.eclipse.jetty:jetty-server MAVEN version 8.0.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.ocpsoft.rewrite:rewrite-test-harness =1.0.0.alpha7, =0.2.16-incubating, =0.2.16-incubating,...

com.cloudhopper:ch-jetty (1.0.2), com.cloudhopper:ch-mq-remote (>=3.0.3, <=3.0.4) +57 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.14.v20131031)

org.eclipse.jetty:jetty-server MAVEN version 7.6.14.v20131031 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.cloudhopper:ch-jetty 1.0.2 - com.cloudhopper:ch-mq-remote =3.0.3,...

com.confluex:qpid-in-a-can (0.2.0), com.propensive:rapture-extras_2.10 (>=2.0.0-m4, <=2.0.0-m9) +89 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (7.6.10.v20130312)

org.eclipse.jetty:jetty-server MAVEN version 7.6.10.v20130312 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.confluex:qpid-in-a-can 0.2.0 - com.propensive:rapture-extras2.10 =2.0.0-m4, =2.0.0-m...

com.adaptrex:adaptrex-server (>=0.5.0, <=0.9.12), com.bazaarvoice.dropwizard:dropwizard-configurable-assets-bundle (>=0.1.4, <=0.1.7) +79 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.1.5.v20120716)

org.eclipse.jetty:jetty-server MAVEN version 8.1.5.v20120716 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.adaptrex:adaptrex-server =0.5.0, =0.1.4, =0.5.1-1, =0.5.1-1, =0.6.0, =0.5.0, =1.1.0,...

org.apache.vysper.extensions:xep0124-xep0206-bosh (0.6), org.apache.vysper:vysper (0.6) +39 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (7.1.3.v20100526)

org.eclipse.jetty:jetty-server MAVEN version 7.1.3.v20100526 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.apache.vysper.extensions:xep0124-xep0206-bosh 0.6 - org.apache.vysper:vysper 0.6 -...

com.github.rest-driver:rest-client-driver (1.1.15), com.proofpoint.discovery:discovery-elb (1.1) +60 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (8.0.3.v20111011)

org.eclipse.jetty:jetty-server MAVEN version 8.0.3.v20111011 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.github.rest-driver:rest-client-driver 1.1.15 - com.proofpoint.discovery:discovery-elb...

br.com.objectos:way-ui-server (0.0.1), com.adobe.cq.testing:cq-it-framework (2.0.130) +264 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (7.5.4.v20111024)

org.eclipse.jetty:jetty-server MAVEN version 7.5.4.v20111024 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - br.com.objectos:way-ui-server 0.0.1 - com.adobe.cq.testing:cq-it-framework 2.0.130 -...

org.eclipse.jetty.aggregate:jetty-all (8.1.0.rc5), org.eclipse.jetty.aggregate:jetty-all-server (8.1.0.rc5) +43 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (8.1.0.rc5)

org.eclipse.jetty:jetty-server MAVEN version 8.1.0.rc5 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.1.0.rc5 - org.eclipse.jetty.aggregate:jetty-all-server...

com.github.robfletcher:betamax (1.0), com.ning.jetty:ning-service-skeleton-base (0.0.6) +59 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (7.5.1.v20110908)

org.eclipse.jetty:jetty-server MAVEN version 7.5.1.v20110908 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.github.robfletcher:betamax 1.0 - com.ning.jetty:ning-service-skeleton-base 0.0.6 -...

GHSA-VGG8-72F2-QM23 Critical severity vulnerability that affects org.eclipse.jetty:jetty-server

In Eclipse Jetty, versions 9.2.x and older, 9.3.x, transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a smaller chunk size and content sent as chunk body could be interpreted as a pipelined...

org.eclipse.jetty.aggregate:jetty-all (7.4.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.4.0.rc0) +40 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (7.4.0.rc0)

org.eclipse.jetty:jetty-server MAVEN version 7.4.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.4.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...