ca.ibodrov.concord:mcp-for-concord (>=0.0.1, <=0.0.2), ca.ibodrov.concord:repository-browser-plugin (>=1.0.0, <=1.0.1) +230 more potentially affected by CVE-2026-18659 via org.eclipse.jetty.ee8:jetty-ee8-security (>=12.0.0.alpha0, <=12.0.38)

org.eclipse.jetty.ee8:jetty-ee8-security MAVEN version =12.0.0.alpha0, =0.0.1, =1.0.0, =2.0.3, =0.0.27, =0.0.22, =0.0.27, =2.6.0-rc1, =3.4.0, =2.0.20, =2.0.20, =2.0.20, =2.0.20, =2.0.20, =1.0.0, =2.11.0, =2.46.0 and more Source cves: CVE-2026-18659 Source advisory:...

com.ascentstream.pulsar:pulsar-bookkeeper-prometheus-metrics-provider (4.0.11.0), com.ascentstream.pulsar:pulsar-broker (4.0.11.0) +110 more potentially affected by CVE-2026-18659 via org.eclipse.jetty.ee8:jetty-ee8-security (>=12.1.0.alpha0, <=12.1.11)

org.eclipse.jetty.ee8:jetty-ee8-security MAVEN version =12.1.0.alpha0, =2.10.0-m3, =4.0.0, =4.0.1 and more Source cves: CVE-2026-18659 Source advisory: SNYK:JAVA-ORGECLIPSEJETTYEE8-21243557...

com.ascentstream.pulsar:pulsar-bookkeeper-prometheus-metrics-provider (4.0.11.0), com.ascentstream.pulsar:pulsar-broker (4.0.11.0) +110 more potentially affected by CVE-2026-18662 via org.eclipse.jetty.ee8:jetty-ee8-security (>=12.1.0.alpha0, <=12.1.11)

org.eclipse.jetty.ee8:jetty-ee8-security MAVEN version =12.1.0.alpha0, =2.10.0-m3, =4.0.0, =4.0.1 and more Source cves: CVE-2026-18662 Source advisory: SNYK:JAVA-ORGECLIPSEJETTYEE8-21243541...

ca.ibodrov.concord:mcp-for-concord (>=0.0.1, <=0.0.2), ca.ibodrov.concord:repository-browser-plugin (>=1.0.0, <=1.0.1) +230 more potentially affected by CVE-2026-18662 via org.eclipse.jetty.ee8:jetty-ee8-security (>=12.0.0.alpha0, <=12.0.38)

org.eclipse.jetty.ee8:jetty-ee8-security MAVEN version =12.0.0.alpha0, =0.0.1, =1.0.0, =2.0.3, =0.0.27, =0.0.22, =0.0.27, =2.6.0-rc1, =3.4.0, =2.0.20, =2.0.20, =2.0.20, =2.0.20, =2.0.20, =1.0.0, =2.11.0, =2.46.0 and more Source cves: CVE-2026-18662 Source advisory:...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the processing of security constraints when multiple constraints with identical http-method-omission sets and no url-patterns are present. An attacker can bypass intended security restrictions by crafting...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the ConstraintSecurityHandler process when HTTP method constraints are defined with http-method-omission. An attacker can gain unauthorized access by crafting requests that use substrings of the defined HTTP...

com.ascentstream.pulsar:pulsar-bookkeeper-prometheus-metrics-provider (4.0.11.0), com.ascentstream.pulsar:pulsar-broker (4.0.11.0) +109 more potentially affected by CVE-2026-18659 via org.eclipse.jetty.ee8:jetty-ee8-security (>=12.1.0, <=12.1.11)

org.eclipse.jetty.ee8:jetty-ee8-security MAVEN version =12.1.0, =2.10.0-m3, =4.0.0, =4.0.1 and more Source cves: CVE-2026-18659 Source advisory: MEND:CVE-2026-18659...

ca.ibodrov.concord:mcp-for-concord (>=0.0.1, <=0.0.2), ca.ibodrov.concord:repository-browser-plugin (>=1.0.0, <=1.0.1) +229 more potentially affected by CVE-2026-18659 via org.eclipse.jetty.ee8:jetty-ee8-security (>=12.0.0, <=12.0.38)

org.eclipse.jetty.ee8:jetty-ee8-security MAVEN version =12.0.0, =0.0.1, =1.0.0, =2.0.3, =0.0.27, =0.0.22, =0.0.27, =2.6.0-rc1, =3.4.0, =2.0.20, =2.0.20, =2.0.20, =2.0.20, =2.0.20, =1.0.0, =2.11.0, =2.46.0 and more Source cves: CVE-2026-18659 Source advisory: MEND:CVE-2026-18659...

com.ascentstream.pulsar:pulsar-bookkeeper-prometheus-metrics-provider (4.0.11.0), com.ascentstream.pulsar:pulsar-broker (4.0.11.0) +109 more potentially affected by CVE-2026-18662 via org.eclipse.jetty.ee8:jetty-ee8-security (>=12.1.0, <=12.1.11)

org.eclipse.jetty.ee8:jetty-ee8-security MAVEN version =12.1.0, =2.10.0-m3, =4.0.0, =4.0.1 and more Source cves: CVE-2026-18662 Source advisory: MEND:CVE-2026-18662...

ca.ibodrov.concord:mcp-for-concord (>=0.0.1, <=0.0.2), ca.ibodrov.concord:repository-browser-plugin (>=1.0.0, <=1.0.1) +229 more potentially affected by CVE-2026-18662 via org.eclipse.jetty.ee8:jetty-ee8-security (>=12.0.0, <=12.0.38)

org.eclipse.jetty.ee8:jetty-ee8-security MAVEN version =12.0.0, =0.0.1, =1.0.0, =2.0.3, =0.0.27, =0.0.22, =0.0.27, =2.6.0-rc1, =3.4.0, =2.0.20, =2.0.20, =2.0.20, =2.0.20, =2.0.20, =1.0.0, =2.11.0, =2.46.0 and more Source cves: CVE-2026-18662 Source advisory: MEND:CVE-2026-18662...

Eclipse Jetty authorization issue vulnerability

Versions 12.1.0 through 12.1.11 of Eclipse Jetty jetty-ee11-servlet, versions 12.0.0 through 12.0.38 and 12.1.0 through 12.1.11 of jetty-ee10-servlet, versions 12.0.0 through 12.0.38 and 12.1.0 through 12.1.11 of jetty-ee9-security, versions 12.0.0 through 12.0.38 and 12.1.0 through 12.1.11 of...

Security Bulletin: IBM Sterling Control Center is affected by a vulnerability in jetty-ee8-security jar (CVE-2026-10050)

Summary IBM Sterling Control Center is affected by a vulnerability CVE-2026-10050 reported for jetty-ee8-security-12.0.25.jar Vulnerability Details CVEID:CVE-2026-10050 DESCRIPTION: In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes...

com.ascentstream.pulsar:pulsar-bookkeeper-prometheus-metrics-provider (4.0.11.0), com.ascentstream.pulsar:pulsar-broker (4.0.11.0) +88 more potentially affected by CVE-2026-10050 via org.eclipse.jetty.ee8:jetty-ee8-security (>=12.1.0, <=12.1.9)

org.eclipse.jetty.ee8:jetty-ee8-security MAVEN version =12.1.0, =5.0.1, =5.0.3-beta and more Source cves: CVE-2026-10050 Source advisory: MEND:CVE-2026-10050...

ca.ibodrov.concord:mcp-for-concord (>=0.0.1, <=0.0.2), ca.ibodrov.concord:repository-browser-plugin (>=1.0.0, <=1.0.1) +228 more potentially affected by CVE-2026-10050 via org.eclipse.jetty.ee8:jetty-ee8-security (>=12.0.0, <=12.0.35)

org.eclipse.jetty.ee8:jetty-ee8-security MAVEN version =12.0.0, =0.0.1, =1.0.0, =2.0.3, =0.0.27, =0.0.22, =0.0.27, =2.6.0-rc1, =3.4.0, =2.0.20, =2.0.20, =2.0.20, =2.0.20, =2.0.20, =1.0.0, =2.11.0, =2.44.0 and more Source cves: CVE-2026-10050 Source advisory: MEND:CVE-2026-10050...

com.ascentstream.pulsar:pulsar-bookkeeper-prometheus-metrics-provider (4.0.11.0), com.ascentstream.pulsar:pulsar-broker (4.0.11.0) +88 more potentially affected by CVE-2026-10050 via org.eclipse.jetty.ee8:jetty-ee8-security (>=12.1.0, <=12.1.9)

org.eclipse.jetty.ee8:jetty-ee8-security MAVEN version =12.1.0, =5.0.1, =5.0.3-beta and more Source cves: CVE-2026-10050 Source advisory: OSV:GHSA-2FVJ-HGJ9-J2GR...

ca.ibodrov.concord:mcp-for-concord (>=0.0.1, <=0.0.2), ca.ibodrov.concord:repository-browser-plugin (>=1.0.0, <=1.0.1) +228 more potentially affected by CVE-2026-10050 via org.eclipse.jetty.ee8:jetty-ee8-security (>=12.0.0, <=12.0.35)

org.eclipse.jetty.ee8:jetty-ee8-security MAVEN version =12.0.0, =0.0.1, =1.0.0, =2.0.3, =0.0.27, =0.0.22, =0.0.27, =2.6.0-rc1, =3.4.0, =2.0.20, =2.0.20, =2.0.20, =2.0.20, =2.0.20, =1.0.0, =2.11.0, =2.44.0 and more Source cves: CVE-2026-10050 Source advisory: SNYK:JAVA-ORGECLIPSEJETTYEE8-18230940...

ca.ibodrov.concord:mcp-for-concord (>=0.0.1, <=0.0.2), ca.ibodrov.concord:repository-browser-plugin (>=1.0.0, <=1.0.1) +228 more potentially affected by CVE-2026-10050 via org.eclipse.jetty.ee8:jetty-ee8-security (>=12.0.0, <=12.0.35)

org.eclipse.jetty.ee8:jetty-ee8-security MAVEN version =12.0.0, =0.0.1, =1.0.0, =2.0.3, =0.0.27, =0.0.22, =0.0.27, =2.6.0-rc1, =3.4.0, =2.0.20, =2.0.20, =2.0.20, =2.0.20, =2.0.20, =1.0.0, =2.11.0, =2.44.0 and more Source cves: CVE-2026-10050 Source advisory: OSV:GHSA-2FVJ-HGJ9-J2GR...

com.ascentstream.pulsar:pulsar-bookkeeper-prometheus-metrics-provider (4.0.11.0), com.ascentstream.pulsar:pulsar-broker (4.0.11.0) +88 more potentially affected by CVE-2026-10050 via org.eclipse.jetty.ee8:jetty-ee8-security (>=12.1.0, <=12.1.9)

org.eclipse.jetty.ee8:jetty-ee8-security MAVEN version =12.1.0, =5.0.1, =5.0.3-beta and more Source cves: CVE-2026-10050 Source advisory: SNYK:JAVA-ORGECLIPSEJETTYEE8-18230940...

com.ascentstream.pulsar:pulsar-bookkeeper-prometheus-metrics-provider (4.0.11.0), com.ascentstream.pulsar:pulsar-broker (4.0.11.0) +88 more potentially affected by CVE-2026-10050 via org.eclipse.jetty.ee8:jetty-ee8-security (>=12.1.0, <=12.1.9)

org.eclipse.jetty.ee8:jetty-ee8-security MAVEN version =12.1.0, =5.0.1, =5.0.3-beta and more Source cves: CVE-2026-10050 Source advisory: GHSA-2FVJ-HGJ9-J2GR...

ca.ibodrov.concord:mcp-for-concord (>=0.0.1, <=0.0.2), ca.ibodrov.concord:repository-browser-plugin (>=1.0.0, <=1.0.1) +228 more potentially affected by CVE-2026-10050 via org.eclipse.jetty.ee8:jetty-ee8-security (>=12.0.0, <=12.0.35)

org.eclipse.jetty.ee8:jetty-ee8-security MAVEN version =12.0.0, =0.0.1, =1.0.0, =2.0.3, =0.0.27, =0.0.22, =0.0.27, =2.6.0-rc1, =3.4.0, =2.0.20, =2.0.20, =2.0.20, =2.0.20, =2.0.20, =1.0.0, =2.11.0, =2.44.0 and more Source cves: CVE-2026-10050 Source advisory: GHSA-2FVJ-HGJ9-J2GR...