CVE-2025-5115

In Eclipse Jetty, versions =9.4.57, =10.0.25, =11.0.25, =12.0.21, =12.1.0.alpha2, an HTTP/2 client may trigger the server to send RSTSTREAM frames, for example by sending frames that are malformed or that should not be sent in a particular stream state, therefore forcing the server to consume...

Eclipse Jetty 安全漏洞

Eclipse Jetty is an open source, Java-based web server and Java Servlet container from the Eclipse Foundation. A security vulnerability exists in Eclipse Jetty versions 9.4.57 and earlier, 10.0.25 and earlier, 11.0.25 and earlier, 12.0.21 and earlier, and 12.1.0.alpha2 and earlier, which originat...

Linux Distros Unpatched Vulnerability : CVE-2022-2191

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse Jetty versions 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, SslConnection does not release ByteBuffers from configured ByteBufferPool in case...

Spring Framework MVC Applications Path Traversal Vulnerability

Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: the application is deployed as a WAR or with an embedded Servlet container the Servlet...

CVE-2025-41242

CVE-2025-41242 is a path traversal vulnerability in Spring Framework MVC when deployed on a non‑compliant Servlet container. An app is at risk if it is WAR‑deployed or uses an embedded container, the container does not reject suspicious URI sequences, and the app serves static resources via Sprin...

CVE-2025-41242

Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: the application is deployed as a WAR or with an embedded Servlet container the Servlet...

Linux Distros Unpatched Vulnerability : CVE-2024-22201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jetty is a Java based web server and servlet engine. An HTTP/2 SSL connection that is established and TCP congested will be leaked when it times out. An attacke...

Linux Distros Unpatched Vulnerability : CVE-2024-6762

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jetty PushSessionCacheFilter can be exploited by unauthenticated users to launch remote DoS attacks by exhausting the server's memory. CVE-2024-6762 Note that...

Linux Distros Unpatched Vulnerability : CVE-2021-28169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - For Eclipse Jetty versions = 9.4.40, = 10.0.2, = 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resourc...

Linux Distros Unpatched Vulnerability : CVE-2019-17632

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse Jetty versions 9.4.21.v20190926, 9.4.22.v20191022, and 9.4.23.v20191118, the generation of default unhandled Error response content in text/html and...

Malicious code in kale-jetty-sz12 (npm)

The package kale-jetty-sz12 was found to contain malicious code...

Malicious code in dock-jetty-gjfr (npm)

The package dock-jetty-gjfr was found to contain malicious code...

Malicious code in jetty-ocean-vznq (npm)

The package jetty-ocean-vznq was found to contain malicious code...

MAL-2025-35580 Malicious code in test-mlw2-jingo-jetty (npm)

The package test-mlw2-jingo-jetty was found to contain malicious code...

Malicious code in observatory-jetty-e0m4 (npm)

The package observatory-jetty-e0m4 was found to contain malicious code...

MAL-2025-28460 Malicious code in orbit-jetty-8bzr (npm)

The package orbit-jetty-8bzr was found to contain malicious code...

MAL-2025-26545 Malicious code in moat-jetty-611n (npm)

The package moat-jetty-611n was found to contain malicious code...

Malicious code in orbit-jetty-8bzr (npm)

The package orbit-jetty-8bzr was found to contain malicious code...

Malicious code in moat-jetty-611n (npm)

The package moat-jetty-611n was found to contain malicious code...

Malicious code in jetty-blackhole-fpot (npm)

The package jetty-blackhole-fpot was found to contain malicious code...