CVE-2026-102461

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the uniqueItems keyword validation uses an On² pairwise comparison loop with no short-circuit or size limit. A remote unauthenticated attacker can submit a moderately-sized JSON array that consumes...

CVE-2026-18661

In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...

CVE-2026-18661

In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...

CVE-2026-18661

In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...

EUVD-2026-101954

In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...

CVE-2026-18661

In Eclipse Jetty , specifically within the jetty-annotations and jetty-eeN-annotations components, a vulnerability exists where Jakarta Spec authoritative url-pattern rules are not correctly applied. This occurs when there is a mix of @ServletSecurity annotations and web.xml defined security-cons...

CVE-2026-18661

In Eclipse Jetty, across various versions of "jetty-annotations", and "jetty-eeN-annotations", the Jakarta Spec authoritative url-pattern rules for mixed "@ServletSecurity" annotation, and "web.xml" defined "security-constraint" on the same "url-pattern" were not being applied if the "web.xml" ha...

CVE-2026-18661

In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...

EUVD-2026-101946

In Eclipse Jetty, HttpClient may receive a redirect of the form: /secure/../evil If an attacker is able to control the redirects, then HttpClient matches authentication credentials against /secure rather than normalizing the path to /evil, and will therefore follow the redirect sending the...

CVE-2026-76184

In Eclipse Jetty, HttpClient may receive a redirect of the form: /secure/../evil If an attacker is able to control the redirects, then HttpClient matches authentication credentials against /secure rather than normalizing the path to /evil, and will therefore follow the redirect sending the...

CVE-2026-76184

In Eclipse Jetty , the HttpClient component is vulnerable to a path traversal issue during redirects. If an attacker controls the redirects, they can provide a path like /secure/../evil. The client incorrectly matches authentication credentials against /secure instead of normalizing the path to /...

CVE-2026-76184

In Eclipse Jetty, HttpClient may receive a redirect of the form: /secure/../evil If an attacker is able to control the redirects, then HttpClient matches authentication credentials against /secure rather than normalizing the path to /evil, and will therefore follow the redirect sending the...

CVE-2026-76184

In Eclipse Jetty, HttpClient may receive a redirect of the form: /secure/../evil If an attacker is able to control the redirects, then HttpClient matches authentication credentials against /secure rather than normalizing the path to /evil, and will therefore follow the redirect sending the...

CVE-2026-76182

In Eclipse Jetty, "TryPathsHandler" and "TryFilesFilter" can be configured to forward requests to template URIs such as "index?p=$path", where "$path" is the request path in context. However, URI paths may contain characters that are reserved in URI queries so that a path of "/s&a=1" when applied...

CVE-2026-76182

In Eclipse Jetty, TryPathsHandler and TryFilesFilter can be configured to forward requests to template URIs such as index?p=$path, where $path is the request path in context. However, URI paths may contain characters that are reserved in URI queries so that a path of /s&a=1 when applied to the...

CVE-2026-76182

In Eclipse Jetty, TryPathsHandler and TryFilesFilter can be configured to forward requests to template URIs such as index?p=$path, where $path is the request path in context. However, URI paths may contain characters that are reserved in URI queries so that a path of /s&a=1 when applied to the...

CVE-2026-76182

In Eclipse Jetty, TryPathsHandler and TryFilesFilter can be configured to forward requests to template URIs such as index?p=$path, where $path is the request path in context. However, URI paths may contain characters that are reserved in URI queries so that a path of /s&a=1 when applied to the...

CVE-2026-76182

In Eclipse Jetty , the TryPathsHandler and TryFilesFilter components are vulnerable to an injection issue when configured to forward requests to template URIs like index?p=$path. Because the system fails to properly handle reserved URI query characters , a request path containing characters such ...

EUVD-2026-101944

In Eclipse Jetty, TryPathsHandler and TryFilesFilter can be configured to forward requests to template URIs such as index?p=$path, where $path is the request path in context. However, URI paths may contain characters that are reserved in URI queries so that a path of /s&a=1 when applied to the...

CVE-2026-76182

In Eclipse Jetty, TryPathsHandler and TryFilesFilter can be configured to forward requests to template URIs such as index?p=$path, where $path is the request path in context. However, URI paths may contain characters that are reserved in URI queries so that a path of /s&a=1 when applied to the...