com.google.appengine:appengine-java-sdk (>=5.0.0, <=5.2.0-beta), com.google.appengine:jetty121-assembly (>=3.0.0-beta, <=5.2.0-beta) +3 more potentially affected by CVE-2026-19863 via org.eclipse.jetty:jetty-ethereum (>=12.1.0.alpha0, <=12.1.12)

org.eclipse.jetty:jetty-ethereum MAVEN version =12.1.0.alpha0, =5.0.0, =3.0.0-beta, =12.1.0.alpha0, =12.1.0.alpha0, =0.3.1, =0.4.0 Source cves: CVE-2026-19863 Source advisory: SNYK:JAVA-ORGECLIPSEJETTY-21243549...

com.google.appengine:appengine-java-sdk (>=5.0.0, <=5.2.0-beta), com.google.appengine:jetty121-assembly (>=3.0.0-beta, <=5.2.0-beta) +3 more potentially affected by CVE-2026-19863 via org.eclipse.jetty:jetty-ethereum (>=12.1.0, <=12.1.12)

org.eclipse.jetty:jetty-ethereum MAVEN version =12.1.0, =5.0.0, =3.0.0-beta, =12.1.0, =12.1.0, =0.3.1, =0.4.0 Source cves: CVE-2026-19863 Source advisory: MEND:CVE-2026-19863...

ai.h2o:sparkling-water-core_2.11 (>=3.46.0.1-1-2.3, <=3.46.0.6-1-2.4), ai.h2o:sparkling-water-core_2.12 (>=3.46.0.1-1-3.0, <=3.46.0.6-1-3.5) +599 more potentially affected by CVE-2026-103885 via org.apache.directory.api:api-ldap-model (>=2.1.0, <=2.1.8)

org.apache.directory.api:api-ldap-model MAVEN version =2.1.0, =3.46.0.1-1-2.3, =3.46.0.1-1-3.0, =3.46.0.1-1-2.3, =3.46.0.1-1-3.0, =3.46.0.1-1-2.3, =3.46.0.1-1-3.0, =3.46.0.1-1-2.3, =3.46.0.1-1-3.0, =2.0.20, =4.0.2 - com.google.appengine:appengine-local-runtime-jetty12 2.0.23 -...

com.devsoap.plugin.vaadin.groovy:com.devsoap.plugin.vaadin.groovy.gradle.plugin (>=1.2.0.alpha1, <=1.2.0.alpha2), com.devsoap.plugin.vaadin:com.devsoap.plugin.vaadin.gradle.plugin (>=1.2.0.alpha1, <=2.0.0.beta2) +79 more potentially affected by CVE-2026-5795 via org.eclipse.jetty:jetty-jaspi (>=9.4.0.v20161208, <=9.4.58.v20250814)

org.eclipse.jetty:jetty-jaspi MAVEN version =9.4.0.v20161208, =1.2.0.alpha1, =1.2.0.alpha1, =1.2.0.alpha1, =1.8.2, =2.0.20, =7.2.16, =0.1.1, =4.3.0, =7.2.0, =7.1.0, =7.1.0, =7.1.0, =7.1.0, =6.11.0, =6.11.4 and more Source cves: CVE-2026-5795 Source advisory: OSV:GHSA-R7P8-XQ5M-436C...