46 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-18661
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed...
ai.starlake:starlake-spark2_2.11 (>=0.2.7, <=0.2.8), ai.starlake:starlake-spark3_2.12 (>=0.2.7, <=0.2.10) +1298 more potentially affected by CVE-2026-18661 via org.eclipse.jetty:jetty-annotations (>=9.4.0.m0, <=9.4.58.v20250814)
org.eclipse.jetty:jetty-annotations MAVEN version =9.4.0.m0, =0.2.7, =0.2.7, =2.0.3.release, =2.1.4.release, =2.0.2.release, =1.0.3.release, =0.14, =0.0.2, =0.0.1, =0.9.1, =1.0.0, =1.0.15 and more Source cves: CVE-2026-18661 Source advisory: SNYK:JAVA-ORGECLIPSEJETTY-21243586...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization in the processing of url-pattern rules when both @ServletSecurity annotations and web.xml defined security-constraint are present on the same url-pattern, and the web.xml contains more than one url-pattern for a...
DEBIAN-CVE-2026-18661
In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...
CVE-2026-18661
In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...
CVE-2026-18661
In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...
CVE-2026-18661
In Eclipse Jetty , specifically within the jetty-annotations and jetty-eeN-annotations components, a vulnerability exists where Jakarta Spec authoritative url-pattern rules are not correctly applied. This occurs when there is a mix of @ServletSecurity annotations and web.xml defined security-cons...
EUVD-2026-101954
In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...
CVE-2026-18661
In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...
CVE-2026-18661
In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...
CVE-2026-18661
In Eclipse Jetty, across various versions of "jetty-annotations", and "jetty-eeN-annotations", the Jakarta Spec authoritative url-pattern rules for mixed "@ServletSecurity" annotation, and "web.xml" defined "security-constraint" on the same "url-pattern" were not being applied if the "web.xml" ha...
ai.starlake:starlake-spark2_2.11 (>=0.2.7, <=0.2.8), ai.starlake:starlake-spark3_2.12 (>=0.2.7, <=0.2.10) +1297 more potentially affected by CVE-2026-18661 via org.eclipse.jetty:jetty-annotations (>=9.4.0.v20161208, <=9.4.58.v20250814)
org.eclipse.jetty:jetty-annotations MAVEN version =9.4.0.v20161208, =0.2.7, =0.2.7, =2.0.3.release, =2.1.4.release, =2.0.2.release, =1.0.3.release, =0.14, =0.0.2, =0.0.1, =0.9.1, =1.0.0, =1.0.15 and more Source cves: CVE-2026-18661 Source advisory: MEND:CVE-2026-18661...
CVE-2026-18661
In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...
CVE-2026-18661
In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...
UBUNTU-CVE-2026-18661
In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...
CVE-2026-18661: Incorrect Authorization
In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...
PT-2026-114860
In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...
OPENSUSE-SU-2026:11804-1 jetty-annotations-9.4.58-6.1 on GA media
These are all security issues fixed in the jetty-annotations-9.4.58-6.1 package on the GA media of openSUSE Tumbleweed...