CVE-2026-10050CRITICAL 9.1In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes.
This was done because …
CVE-2026-8384MEDIUM 5.3In Eclipse Jetty, an HTTP URI of this form:
/public;/../admin/secret.txt
results in an unresolved path of:
/public/../admi…
CVE-2026-6790MEDIUM 5.3In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority (host and port) matches what p…
CVE-2026-10051HIGH 7.5In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the trailers in subsequent requests performed over the …
CVE-2024-7708HIGH 7.5For requests that have a body, but reading the body may end up in reading 0 bytes, there is a buffer leak.
This is particularly the case for…