What’s Vulnerable › Products

Eclipse Foundation org.eclipse.jetty:jetty-security vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Eclipse Foundation org.eclipse.jetty:jetty-security version is affected

Latest Eclipse Foundation org.eclipse.jetty:jetty-security vulnerabilities

• CVE-2026-19864 — (CVSS 5.6)
• CVE-2026-18662 — (CVSS 6.9)
• CVE-2026-18659 — Unauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substring (CVSS 6.9)