The Eclipse Foundation Eclipse Jetty vulnerabilities

58 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 18 published in the last 12 months.

Exploited The Eclipse Foundation Eclipse Jetty vulnerabilities

CVE-2026-77711 — (CVSS 8.2)
CVE-2026-76184 — (CVSS 8.2)
CVE-2026-76182 — (CVSS 6.9)
CVE-2026-19203 — (CVSS 8.3)
CVE-2026-12611 — (CVSS 8.7)
CVE-2026-19204 — (CVSS 8.7)
CVE-2026-10050 — Digest authentication lossy encoding (CVSS 9.1)
CVE-2026-8384 — (CVSS 5.3)
CVE-2026-6790 — (CVSS 5.3)
CVE-2026-10051 — (CVSS 7.5)
CVE-2024-7708 — (CVSS 7.5)
CVE-2026-2332 — HTTP Request Smuggling via Chunked Extension Quoted-String Parsing (CVSS 9.1)
CVE-2026-5795 — (CVSS 7.4)
CVE-2026-1605 — (CVSS 7.5)
CVE-2025-11143 — (CVSS 6.5)
CVE-2025-5115 — MadeYouReset HTTP/2 vulnerability (CVSS 7.5)
CVE-2025-1948 — Eclipse Jetty HTTP clients can increase memory allocation (CVSS 7.5)
CVE-2024-13009 — Eclipse Jetty GZIP buffer release (CVSS 7.2)
CVE-2024-8184 — Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks (CVSS 6.5)
CVE-2024-6763 — Jetty URI parsing of invalid authority (CVSS 5.3)
CVE-2024-6762 — Jetty PushSessionCacheFilter can cause remote DoS attacks (CVSS 6.5)
CVE-2024-9823 — Jetty DOS vulnerability on DosFilter (CVSS 7.5)
CVE-2024-22201 — Jetty connection leaking on idle timeout when TCP congested (CVSS 7.5)
CVE-2023-36478 — HTTP/2 HPACK integer overflow and buffer allocation (CVSS 7.5)
CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability (CVSS 7.5) — exploited