CVE-2026-19203

A flaw was found in Jetty. A remote attacker can exploit this vulnerability by sending specially crafted HTTP/1.1 chunked requests. This can cause Jetty and an intermediary proxy to interpret different request boundaries, potentially leading to HTTP request smuggling. This issue arises from Jetty...

Linux Distros Unpatched Vulnerability : CVE-2026-19203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request...

CVE-2026-19203

A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request boundaries, potentially resulting in HTTP request smuggling. This is caused by Jetty accepting a lone LF character as a terminator in parts of...

CVE-2026-19203

Eclipse Jetty is vulnerable to HTTP request smuggling due to acceptance of a lone LF character as a terminator in HTTP/1.1 chunked request parsing. Depending on the Jetty version and configured HTTP compliance mode, the misinterpretation may occur in chunk extensions, chunk data termination, or t...

CVE-2026-19203

A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request boundaries, potentially resulting in HTTP request smuggling. This is caused by Jetty accepting a lone LF character as a terminator in parts of...

EUVD-2026-72718

A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request boundaries, potentially resulting in HTTP request smuggling. This is caused by Jetty accepting a lone LF character as a terminator in parts of...

PT-2026-87042

Name of the Vulnerable Software and Affected Versions Jetty affected versions not specified Description An issue exists where a client can send specially crafted HTTP/1.1 chunked requests that cause the server and an intermediary proxy to interpret request boundaries differently, potentially...

Linux Distros Unpatched Vulnerability : CVE-2025-58056

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients. In versions...

CVE-2025-58056: Inconsistent Interpretation of HTTP Requests

Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients. In versions 4.1.124.Final, and 4.2.0.Alpha3 through 4.2.4.Final, Netty incorrectly accepts standalone newline characters LF as a chunk-size line...