eclipse jetty.project vulnerabilities

Newest CVEs

• CVE-2023-36478

  HTTP/2 HPACK integer overflow and buffer allocation

  eclipse · jetty.project

  High7.5
• CVE-2023-41900

  Jetty's OpenId Revoked authentication allows one request

  eclipse · jetty.project

  Low3.5
• CVE-2023-40167

  Jetty accepts "+" prefixed value in Content-Length

  eclipse · jetty.project

  Medium5.3
• CVE-2023-36479

  Jetty vulnerable to errant command quoting in CGI Servlet

  eclipse · jetty.project

  Low3.5
• CVE-2023-26049

  Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty

  eclipse · jetty.project

  Low2.4
• CVE-2023-26048

  OutOfMemoryError for large multipart without filename in Eclipse Jetty

  eclipse · jetty.project

  Medium5.3