ai.konduit.serving:konduit-serving-common-tests (0.3.0), app.cash.backfila:client-misk (>=0.1.4-20221221.1702-8b7db03, <=2024.05.13.200245-a6430b2) +675 more potentially affected by CVE-2023-40167 via org.eclipse.jetty:jetty-http (>=10.0.0, <=10.0.15)

org.eclipse.jetty:jetty-http MAVEN version =10.0.0, =0.1.4-20221221.1702-8b7db03, =0.1.4-20221221.1702-8b7db03, =2023.06.07.114626-93b9d6f, =0.1.4-20221128.2102-bdd85b6, =0.1.4-20221128.2102-bdd85b6, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.6.0, =6.4.0, =6.4.0, =6.8.8 and more Source...

be.tomcools:dropwizard-websocket-jsr356-bundle (>=4.0.0-beta.1, <=4.0.0), ch.exense.rtm:rtm (3.0.0) +1058 more potentially affected by CVE-2023-40167 via org.eclipse.jetty:jetty-http (>=11.0.0, <=11.0.15)

org.eclipse.jetty:jetty-http MAVEN version =11.0.0, =4.0.0-beta.1, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.24.1, =3.23.0, =3.20.0, =3.20.0, =3.20.0, =3.22.0, =3.25.5 and more Source cves: CVE-2023-40167 Source advisory: GHSA-HMR7-M48G-48F6...

com.artipie:http-client (0.3.11), com.github.mvysny.vaadin-boot:vaadin-boot (12.0) +145 more potentially affected by CVE-2023-40167 via org.eclipse.jetty:jetty-http (12.0.0)

org.eclipse.jetty:jetty-http MAVEN version 12.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - com.artipie:http-client 0.3.11 - com.github.mvysny.vaadin-boot:vaadin-boot 12.0 -...

Security Bulletin: Vulnerability in jetty-http affects IBM Cloud Pak for Data System 1.0(CPDS 1.0) [CVE-2023-26049]

Summary The jetty-http-9.4.48.v20220622.jar package is used by IBM Cloud Pak for Data System 1.0. IBM Cloud Pak for Data System 1.0 has addressed the applicable CVE CVE-2023-26049. Vulnerability Details CVEID:CVE-2023-26049 DESCRIPTION: Eclipse Jetty could allow a remote authenticated attacker to...

Important: Red Hat Security Advisory: Red Hat AMQ Broker 7.11.0 release and security update

Red Hat AMQ Broker 7.11.0 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Security Bulletin: Vulnerability in jetty-http affects IBM Cloud Pak for Data System 2.0(CPDS 2.0) [CVE-2022-2047]

Summary The jetty-http package is used by IBM Cloud Pak for Data System 2.0 . IBM Cloud Pak for Data System 2.0 has addressed the applicable CVE CVE-2022-2047. Vulnerability Details CVEID:CVE-2022-2047 DESCRIPTION: Eclipse Jetty could allow a remote authenticated attacker to bypass security...

Improper Input Validation

jetty-http is vulnerable to improper input validation. The vulnerability exists because the authority function of HttpURI.java does not properly validate the path parameter as a valid authority, allowing an attacker to parse invalid URLs such as http://localhost;/path for the hostname...

CVE-2022-2048

In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources lef...

org.cometd.java:cometd-java-client (1.0.beta8), org.cometd.java:cometd-java-demo (1.0.beta8) +21 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.0.0.m1)

org.eclipse.jetty:jetty-http MAVEN version 7.0.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.cometd.java:cometd-java-client 1.0.beta8 - org.cometd.java:cometd-java-demo 1.0.beta8 -...

org.cometd.java:cometd-examples-java (1.0.beta9), org.cometd.java:cometd-java-client (1.0.beta9) +34 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.0.0.m3)

org.eclipse.jetty:jetty-http MAVEN version 7.0.0.m3 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.cometd.java:cometd-examples-java 1.0.beta9 - org.cometd.java:cometd-java-client 1.0.beta9 -...

org.cometd.java:cometd-examples-java (1.0.beta10), org.cometd.java:cometd-java-client (1.0.beta10) +34 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.0.0.m4)

org.eclipse.jetty:jetty-http MAVEN version 7.0.0.m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.cometd.java:cometd-examples-java 1.0.beta10 - org.cometd.java:cometd-java-client 1.0.beta10 -...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc0) +26 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.0.0.rc0)

org.eclipse.jetty:jetty-http MAVEN version 7.0.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc1), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc1) +26 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.0.0.rc1)

org.eclipse.jetty:jetty-http MAVEN version 7.0.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc1 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc2), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc2) +32 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.0.0.rc2)

org.eclipse.jetty:jetty-http MAVEN version 7.0.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc2 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc3), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc3) +33 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.0.0.rc3)

org.eclipse.jetty:jetty-http MAVEN version 7.0.0.rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc3 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc5), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc5) +34 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.0.0.rc5)

org.eclipse.jetty:jetty-http MAVEN version 7.0.0.rc5 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc5 - org.eclipse.jetty.aggregate:jetty-all-server...

br.com.arsmachina:tapestry-url-rewriter (>=1.0.1, <=2.0.0), org.apache.geronimo.assemblies:geronimo-jetty7-javaee5 (2.2) +97 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.0.0.v20091005)

org.eclipse.jetty:jetty-http MAVEN version 7.0.0.v20091005 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - br.com.arsmachina:tapestry-url-rewriter =1.0.1, =2.0.0 -...

com.github.spullara.mustache.java:handlebar (>=0.5, <=0.9.5), io.leon:leon-core (>=0.5.8, <=0.5.18) +106 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.0.2.v20100331)

org.eclipse.jetty:jetty-http MAVEN version 7.0.2.v20100331 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - com.github.spullara.mustache.java:handlebar =0.5, =0.5.8, =0.1.0, =0.1.0, =0.1.0, =0.1.0,...

org.eclipse.jetty.aggregate:jetty-all (7.1.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.1.0.rc0) +37 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.1.0.rc0)

org.eclipse.jetty:jetty-http MAVEN version 7.1.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.1.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.1.0.rc1), org.eclipse.jetty.aggregate:jetty-all-server (7.1.0.rc1) +36 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.1.0.rc1)

org.eclipse.jetty:jetty-http MAVEN version 7.1.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.1.0.rc1 - org.eclipse.jetty.aggregate:jetty-all-server...