org.http4k:http4k-aws (3.199.0), org.http4k:http4k-client-apache (3.199.0) +32 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.199.0)

org.http4k:http4k-core MAVEN version 3.199.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.199.0 - org.http4k:http4k-client-apache 3.199.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-client-apache (2.1.1), org.http4k:http4k-client-okhttp (2.1.1) +8 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (2.1.1)

org.http4k:http4k-core MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 2.1.1 - org.http4k:http4k-client-okhttp 2.1.1 - org.http4k:http4k-contract 2.1.1 -...

org.http4k:http4k-aws (3.158.1), org.http4k:http4k-client-apache (3.158.1) +31 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.158.1)

org.http4k:http4k-core MAVEN version 3.158.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.158.1 - org.http4k:http4k-client-apache 3.158.1 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.131.0), org.http4k:http4k-client-apache (3.131.0) +31 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.131.0)

org.http4k:http4k-core MAVEN version 3.131.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.131.0 - org.http4k:http4k-client-apache 3.131.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.210.0), org.http4k:http4k-client-apache (3.210.0) +32 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.210.0)

org.http4k:http4k-core MAVEN version 3.210.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.210.0 - org.http4k:http4k-client-apache 3.210.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.150.0), org.http4k:http4k-client-apache (3.150.0) +31 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.150.0)

org.http4k:http4k-core MAVEN version 3.150.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.150.0 - org.http4k:http4k-client-apache 3.150.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.128.0), org.http4k:http4k-client-apache (3.128.0) +31 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.128.0)

org.http4k:http4k-core MAVEN version 3.128.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.128.0 - org.http4k:http4k-client-apache 3.128.0 - org.http4k:http4k-client-apache-async...

Security update for jetty-minimal

This update for jetty-minimal fixes the following issues: CVE-2026-10050: ISO-8859-1 lossy encoding allows authentication bypass via character substitution bsc1272393. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

SUSE-SU-2026:3631-1 Security update for jetty-minimal

This update for jetty-minimal fixes the following issues: - CVE-2026-10050: ISO-8859-1 lossy encoding allows authentication bypass via character substitution bsc1272393...

Improper Authorization

Apache ActiveMQ is vulnerable to Improper Authorization. The vulnerability is due to incorrect default Jetty access controls that allow low-privileged authenticated Web Console users to access /admin/ paths, which allows them to perform administrative actions without the required privileges...

Improper Authorization

Apache ActiveMQ is vulnerable to Improper Authorization. The vulnerability is due to misconfigured Jetty settings that fail to restrict /admin/ paths to administrators, where an authenticated low‑privilege Web Console user can access those paths and potentially perform administrative actions...

SUSE CVE-2020-27223

In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 inclusive, 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of "quality" i.e. q parameters, the server may enter a denial of service DoS state due to high CPU usage processing those quality...

Security Bulletin: Multiple vulnerabilities in IBM Rational Developer for i (CVE-2026-10051, CVE-2026-6790, CVE-2026-8384, CVE-2026-10050, CVE-2026-59879, CVE-2026-59880)

Summary IBM Rational Developer for i is affected by a sensitive information exposure vulnerability in Eclipse Jetty-server CVE-2026-10051, an improper input validation vulnerability in Eclipse Jetty-server CVE-2026-6790, an authorization decision vulnerability in Eclipse Jetty-util CVE-2026-8384,...

ROOT-APP-MAVEN-CVE-2025-5115 CVE-2025-5115 in org.eclipse.jetty.http2:jetty-http2-common - Patched by Root

Root has patched CVE-2025-5115 in the org.eclipse.jetty.http2:jetty-http2-common package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-6763 CVE-2024-6763 in org.eclipse.jetty:jetty-http - Patched by Root

Root has patched CVE-2024-6763 in the org.eclipse.jetty:jetty-http package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-1948 CVE-2025-1948 in org.eclipse.jetty.http2:jetty-http2-common - Patched by Root

Root has patched CVE-2025-1948 in the org.eclipse.jetty.http2:jetty-http2-common package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-11143 CVE-2025-11143 in org.eclipse.jetty:jetty-http - Patched by Root

Root has patched CVE-2025-11143 in the org.eclipse.jetty:jetty-http package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-22201 CVE-2024-22201 in org.eclipse.jetty.http2:jetty-http2-common - Patched by Root

Root has patched CVE-2024-22201 in the org.eclipse.jetty.http2:jetty-http2-common package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-8184 CVE-2024-8184 in org.eclipse.jetty:jetty-server - Patched by Root

Root has patched CVE-2024-8184 in the org.eclipse.jetty:jetty-server package for Root:Maven. Multiple fixed versions available...

Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the HDFS layer are now addressed in 5.2.3.8 or higher and 6.0.1.1 or higher

Summary The following vulnerabilities, which can affect IBM Storage Scale and the HDFS layer and could provide weaker-than-expected security, are now addressed in Storage Scale 5.2.3.8 or higher and 6.0.1.1 or higher. CVE-2026-33558, CVE-2026-2332, CVE-2026-33870, CVE-2025-11143 Vulnerability...