{"id":"CVE-2020-27218","aliases":["BIT-kafka-2020-27218","BIT-spark-2020-27218","DEBIAN-CVE-2020-27218","DLA-3641-1","EUVD-2020-1488","GHSA-86wm-rrjm-8wh8","RHSA-2021:2431","RHSA-2021:2499","RHSA-2021:2517","SUSE-SU-2020:3922-1","UBUNTU-CVE-2020-27218","openSUSE-SU-2021:0012-1","openSUSE-SU-2024:10878-1"],"status":"published","title":"Buffer not correctly recycled in Gzip Request inflation","description":"In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacker can send a request with a body that is received entirely but not consumed by the application, then a subsequent request on the same connection will see that body prepended to its body. The attacker will not see any data but may inject data into the body of the subsequent request.","severity":{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.08277,"percentile":0.94985,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-226"],"published":"2020-11-28T00:00:00Z","modified":"2026-10-26T12:02:41Z","fixes":[{"ecosystem":"Maven","package":"org.eclipse.jetty:jetty-server","fixed_in":["9.4.35.v20201120"],"sources":["ghsa","osv"]},{"ecosystem":"Bitnami","package":"kafka","fixed_in":["2.7.1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"spark","fixed_in":["2.4.9","3.0.4"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"jetty9","fixed_in":["9.4.35-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"jetty9","fixed_in":["9.4.35-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"jetty9","fixed_in":["9.4.35-1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"jetty-minimal","fixed_in":["9.4.35-3.3.4"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"jetty-minimal","fixed_in":["9.4.35-lp152.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"jetty-websocket","fixed_in":["9.4.35-lp152.2.3.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.eclipse.jetty:jetty-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.0"},{"last_affected":"9.4.34"},{"fixed":"9.4.35.v20201120"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"kafka","ranges":[{"type":"SEMVER","events":[{"introduced":"2.7.0"},{"fixed":"2.7.1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"spark","ranges":[{"type":"SEMVER","events":[{"introduced":"2.4.8"},{"fixed":"2.4.9"},{"introduced":"3.0.3"},{"fixed":"3.0.4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"jetty9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.35-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"jetty9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.35-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"jetty9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.35-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"jetty9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.50-4+deb10u1"}]}],"versions":["9.4.15-1","9.4.16-0+deb10u1","9.4.16-0+deb10u2","9.4.16-0+deb10u3","9.4.18-1","9.4.18-2","9.4.26-1","9.4.26-1~bpo10+1","9.4.27-1","9.4.28-1","9.4.28-1~bpo10+1","9.4.29-1","9.4.31-1","9.4.31-1~bpo10+1","9.4.33-1","9.4.33-1~bpo10+1","9.4.35-1","9.4.35-1~bpo10+1","9.4.36-1","9.4.36-1~bpo10+1","9.4.38-1","9.4.38-1~bpo10+1","9.4.39-1","9.4.39-1~bpo10+1","9.4.39-2","9.4.39-3","9.4.44-1","9.4.44-2","9.4.44-3","9.4.44-4","9.4.45-1","9.4.46-1","9.4.48-1","9.4.49-1","9.4.49-1.1","9.4.50-1","9.4.50-1~bpo11+1","9.4.50-2","9.4.50-3","9.4.50-4"],"bundled":3},{"source":"osv","ecosystem":"Maven","package":"org.eclipse.jetty:jetty-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.0"},{"fixed":"9.4.35.v20201120"}]}],"versions":["9.4.0.v20161208","9.4.0.v20180619","9.4.1.v20170120","9.4.1.v20180619","9.4.10.RC0","9.4.10.RC1","9.4.10.v20180503","9.4.11.v20180605","9.4.12.RC0","9.4.12.RC1","9.4.12.RC2","9.4.12.v20180830","9.4.13.v20181111","9.4.14.v20181114","9.4.15.v20190215","9.4.16.v20190411","9.4.17.v20190418","9.4.18.v20190429","9.4.19.v20190610","9.4.2.v20170220","9.4.2.v20180619","9.4.20.v20190813","9.4.21.v20190926","9.4.22.v20191022","9.4.23.v20191118","9.4.24.v20191120","9.4.25.v20191220","9.4.26.v20200117","9.4.27.v20200227","9.4.28.v20200408","9.4.29.v20200521","9.4.3.v20170317","9.4.3.v20180619","9.4.30.v20200611","9.4.31.v20200723","9.4.32.v20200930","9.4.33.v20201020","9.4.34.v20201102","9.4.4.v20170414","9.4.4.v20180619","9.4.5.v20170502","9.4.5.v20180619","9.4.6.v20170531","9.4.6.v20180619","9.4.7.RC0","9.4.7.v20170914","9.4.7.v20180619","9.4.8.v20171121","9.4.8.v20180619","9.4.9.v20180320"]},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.277.3.1623846768-1.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.1623326336-1.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.277.3.1623853726-1.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.289.1.1624365627-1.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.1624366838-1.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"jetty-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.35-3.3.4"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"jetty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.1.26-1ubuntu1","6.1.26-1ubuntu1.1","6.1.26-1ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"eclipse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.8.1-8"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"jetty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.1.26-5","6.1.26-5ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"eclipse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.8.1-10","3.8.1-11"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"jetty-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.35-lp152.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"jetty-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.35-lp152.2.3.1"}]}]}],"products":[{"vendor":"apache","product":"kafka"},{"vendor":"apache","product":"spark"},{"vendor":"debian","product":"debian_linux"},{"vendor":"eclipse","product":"jetty"},{"vendor":"eclipse foundation","product":"eclipse jetty"},{"vendor":"netapp","product":"oncommand_system_manager"},{"vendor":"netapp","product":"snap_creator_framework"},{"vendor":"oracle","product":"blockchain_platform"},{"vendor":"oracle","product":"communications_converged_application_server_-_service_controller"},{"vendor":"oracle","product":"communications_offline_mediation_controller"},{"vendor":"oracle","product":"communications_pricing_design_center"},{"vendor":"oracle","product":"communications_services_gatekeeper"},{"vendor":"oracle","product":"communications_session_route_manager"},{"vendor":"oracle","product":"flexcube_private_banking"},{"vendor":"oracle","product":"hyperion_infrastructure_technology"},{"vendor":"oracle","product":"rest_data_services"},{"vendor":"oracle","product":"retail_eftlink"},{"vendor":"oracle","product":"siebel_core_-_automation"},{"vendor":"the eclipse foundation","product":"eclipse jetty"}],"references":[{"url":"https://bugs.eclipse.org/bugs/show_bug.cgi?id=568892","tags":["x_transferred","Issue Tracking","Vendor Advisory","advisory","report","web"]},{"url":"https://github.com/eclipse/jetty.project/security/advisories/GHSA-86wm-rrjm-8wh8","tags":["x_transferred","Third Party Advisory","advisory","web","article"]},{"url":"https://lists.apache.org/thread.html/r6d5bb60a13e8b539600f86cb72097967b951de5c7ef1e4005cda74a7%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r8fee46fd9f1254150cc55eecf1ea6a448fca1f7cf1d1e7f9c4803fdb%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rbc5a8d7a0a13bc8152d427a7e9097cdeb139c6cfe111b2f00f26d16b%40%3Cissues.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r8c839a0d88cd6504abbe72c260371094f47014b2ba08d8d2c0232e3c%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r22776d06582985cca5bd2a92519a2b13b4cae2d8e087318da03c036d%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rfa8879a713480b206c152334419499e6af0878c36217abcc9ab4f0d1%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/re86a6ba09dc74e709db843e3561ead923c8fd1cba32343656dd8c44b%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r23ce6b8965e30808daa77a80fcd69833b1fc632d80465d0419eff619%40%3Cissues.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r4981622ba15e8be1657d30b7c85044c7aabe89751fa7324f8604b834%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/re03a566114435a8cc8eb72158242b0f560c5eeccbb4ee98d22de8373%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r9f571b086965b35d4e91e47fb67c27b42b62762248b4900ba723599f%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/ree677ff289ba9a90850f2e3ba7279555df1a170263ba39c5272db236%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r1dd302323c6fe1a542d0371de66a484918fa6c2831ae70d924974bea%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rdde0ad0a03eec962c56b46e70e225918ea2368dcc3fd3488741fad53%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r602683484f607cd1b9598caf3e549fbb01c43fd46a582a32cc3bb545%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rb8f413dc923070919b09db3ac87d079a2dcc6f0adfbb029e206a7930%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rde11c433675143d8d27551c3d9e821fe1955f1551a518033d3716553%40%3Cdev.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rc0e35f4e8a8a36127e3ae7a67f325a3a6a4dbe05034130fb04b6f3b6%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r8f5b144e7a7c2b338f01139d891abbaba12a8173ee01110d21bd0b4d%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r821bbffb64da0f062b4e72d1aa600b91e26bc82a28298ab159121215%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r964d226dd08527fddd7a44410c50daa9d34d398e5c4793f1d7e19da8%40%3Ccommits.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r70940cb30356642f0c49af49259680d6bd866f51c4e8de0f8a498fb0%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r5e5cb33b545548ec4684d33bd88b05a0ae89c4d7cac93eb63255f58f%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r9d7a86fb0b45e5b1855d4df83a5820eef813d55eae3edf224f3d5055%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r8be8c6f0e404a3179d988eb8afed03ede5f2d5ce986d3f709fb82610%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rc1de630c6ed9a958d9f811e816d6d8efb6ca94aed0869bc5cda9d7f8%40%3Cissues.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r46589f4228aabd5fb16135ff5bef0f77f06cdef64f9785ac3349fa02%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rc91c405c08b529b7292c75d9bd497849db700a1297fe3432990f6774%40%3Cnotifications.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r2a57c7bbf36afc87f8ad9e1dd2f53a08e85a1b531283fc2efce4fe17%40%3Ccommits.zookeeper.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r3d43529452c5a16338e8267eb911e8aedc64c3241624302e673961c1%40%3Cdev.hbase.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r186748e676e5aeb4eb603361e6367555ae4daecbde55cfd69fa68ec6%40%3Cissues.hbase.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rce9e232a663d8405c003fe83d5c86c27d1ed65561f3690e824717bc4%40%3Cissues.hbase.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/re9214a4232b7ae204288c283bcee4e39f07da6cc34798e9217ba4eb6%40%3Cissues.hbase.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r8b2271909dabb45f0f1482ef35ffe106ae4b0cf8e877eb514e9cd421%40%3Cissues.hbase.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r3807b1c54066797c4870e03bd2376bdcce9c7c4e6143499f53cd9ca2%40%3Cissues.hbase.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r2f168fd22c071bdd95ec696e45d2a01e928b9fcadbe94fbabeb1549d%40%3Cissues.hbase.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r078c1203e48089b2c934b9f86b61bebe8c049e0ea6273b124f349988%40%3Cissues.hbase.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rccc7ba8c51d662e13496df20466d27dbab54d7001e9e7b2f31468a9e%40%3Cissues.hbase.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r2ffe719224cbe5897f2d06dd22fc77fa12377c39efe9de0c3bf3f837%40%3Cissues.hbase.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/re4e67541a0a25a8589e89f52f8cd163c863fe04b59e048f9f1a04958%40%3Ccommits.hbase.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r96ef6d20c5bd3d42dab500bac56a427e1dce00cf85b083987617643d%40%3Cissues.hbase.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rcbc408088ae99dc3167ea293a562a3a9a7295a20e9a1bfc93e43ae1b%40%3Cissues.hbase.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/re4ae7ada52c5ecfe805eb86ddc0af399ec8a57bfb0d8c632b8723b88%40%3Cdev.hbase.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r3554a4f192db6008c03f2c6c3e0f1691a9b0d615ce955ef67a876ff7%40%3Cjira.kafka.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/racd55c9b704aa68cfb4436f17739b612b5d4f887155e04ed521a4b67%40%3Cdev.kafka.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r7d37d33f2d68912985daf40203182e3d86f3e81266b7a7f350689eeb%40%3Cjira.kafka.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r00858fe27ee35ac8fa0e1549d67e0efb789d63b791b5300390bd8480%40%3Cjira.kafka.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r489dfc3e259ad3837141985dd9291b93e6b40496cdf58808915d67e9%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rbe3f2e0a3c38ed9cbef81507b7cc6e523341865e30dc15c7503adc76%40%3Cissues.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r51ec0120b6c849d12fb7fef34db87ef0bf79fcfcd3d703a9800afbba%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r306c8e5aad1b9afc0c9278430fb571950fbb3ab7dd5d369eb618ffa4%40%3Cissues.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r0d2de2ab5558da68b504bd30db74da1d97dc152a857f5b7e462288ab%40%3Cissues.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r5464405909eb0e1059d5dd57d10c435b9f19325fdebbadb4f1126997%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r25a47cd06750ebb4b0f23a9b7a57c209702c8566a4c970a41ac088df%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rdbdbb4e51f8857e082b464cd128decd7263cf0fb8557f12993562c56%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rba4bca48d2cdfa8c08afc368a9cc4572ec85a5915ba29b8a194bf505%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/reb75282901d0969ba6582725ce8672070715d0773f6ff54dedd60156%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/ra09a653997cbf10aab8c0deabc0fa49f5a8a8ce4305ce9089b98485f%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r870bc5e6e354c3e28ea029cb5726c9e8dd2b88cb0f5f7de1d4e3133d%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rf31e24700f725ef81bc5a2e0444a60e1f295ed0a54c0098362a7bdfa%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r8c22aad0711321537183ccddcade7274ebf9dcbdcdacc6c4f90f43de%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r32a25679d97bf5969d130f8e9b3a3fc54110095397d89952e93dbeb0%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/racf9e6ad2482cb9b1e3e1b2c1b443d9d5cf14055fb54dec3d2dcce91%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r2a541f08bf5f847394297c13a5305c2f76c11e46504ce2a49653890a%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r4aff5ca6bc94a6f13ff77914fd960185ab70cd6cebe96fffd74543ac%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r850d1d0413716e8ba6d910cae7b01a0e560636e17d664769b5080ca5%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rcf7b5818f71bb97fd695eb0f54f8f4f69e15cc5f9ec761ea8be0d0d3%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r5c64173663c71f222ea40617ab362d7a590935fb75c18817fdec377e%40%3Ccommits.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r543ea0a861a78d84c22656fb76880d7ab327048cf7ee3ccc7281375d%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r74ab0f5a5f16ca01eb145403ab753df5b348b8c1656d7c8501d0bfc6%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r8eea4c7797e701f6494c72942dd89f471cda4c2c6e9abbaf05d113d8%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r500e22d0aedba1866d0b5e76429b76652a473a0209fa8bf66c9f7aab%40%3Ccommits.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r94230f46b91c364d39922a8ba0cfe12b8dba1556b14792719a7d921f%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r01806ad8c9cb0590584baf5b1a60237ad92e4ad5bba082ca04d98179%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r8ed14a84656fa0bb8df3bf9373c5be80f47ceac1e2ff068ee734fdb3%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r706562cbbdda569cc556d8a7983d1f9229606e7b51337b820785af26%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r6493e43007f41e34cdbbb66622307fa235374dd2ec5bf52c61075a68%40%3Cissues.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r15500b77c52390e2ec048cea4a6b45edf907ea61cd13259193ff8601%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r81f82ab8ecb83568bafbecf9ce0e73be73980ac1e2af6baf0f344a59%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rd9a960429741406f6557fa344a13d50a0c9976dac2e4c46bb54b32d7%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r3b7c8bc7a1cb8acdcf7753f436564d289d22f2906e934d1b11de3a40%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/re3918edd403b0d3857a13ef2ccf3d2bc0231f3b8758e2a5777ea1cd3%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r9b46505868794fba04d401956304e63e4d8e39bdc118d30e5e87dcd9%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rf0181750e321518c8afa8001e0529d50a9447714ef4f58d98af57904%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rf273267fa2e49314643af3141cec239f97d41de8a59be4ef7e10c65a%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rb6a3866c02ac4446451c7d9dceab2373b6d32fb058f9085c6143de30%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r39f1b1be8e5c0935f7c515eedf907909474bad15185125daacb36d50%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/re014afaa14f4df9d33912ab64dc57249e1c170c7448d7175c6d014ff%40%3Cissues.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r153fbefc27a1b2033692f32ef728ca909a7c7bcc1d21b6c35b38bdd5%40%3Creviews.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r7669dab41f2b34d56bb67700d869dc9c025ff72e9468204799f5ac29%40%3Ccommits.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r4b2e7417a76e3dd4dc9855c6c138c49484080754a09927454f6d89f0%40%3Cissues.spark.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rb4ca79d1af5237108ce8770b7c46ca78095f62ef21331d9d06142388%40%3Cjira.kafka.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rd20651e102cb6742a9d9322ea7b5fc3ab60a7ffecb50fa9157cbf176%40%3Cjira.kafka.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r391d20ab6ec03d6becc7a9f0c5e0f45a7ad8af6b996ae0a49839f6bd%40%3Cjira.kafka.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rbea4d456d88b043be86739ab0200ad06ba5a7921064411c098f79831%40%3Cjira.kafka.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rbbd003149f929b0e2fe58fb315de1658e98377225632e7e4239323fb%40%3Ccommits.kafka.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r05b7ffde2b8c180709e14bc9ca036407bea3ed9f09b32c4705d23a4a%40%3Cjira.kafka.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r990e0296b188d4530d1053882f687fa4f938f108425db2999a180944%40%3Ccommits.kafka.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r942e21ee90e2617a00a08b17b0ac2db961959bec969b91df61584d38%40%3Cdev.kafka.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r66456df852de06a0eed2c0a50252a2c8d360b8a5c005f63c0b1e3d25%40%3Ccommits.kafka.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r380e9257bacb8551ee6fcf2c59890ae9477b2c78e553fa9ea08e9d9a%40%3Ccommits.nifi.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r2fda4dab73097051977f2ab818f75e04fbcb15bb1003c8530eac1059%40%3Cjira.kafka.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rd8e24a3e482e5984bc8c5492dc790413e4fdc1234e3debb94515796b%40%3Cjira.kafka.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/r352e40ca9874d1beb4ad95403792adca7eb295e6bc3bd7b65fabcc21%40%3Ccommits.samza.apache.org%3E","tags":["mailing-list","x_transferred","Issue Tracking","report","web"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","tags":["x_transferred","Patch","Third Party Advisory","advisory","fix","web"]},{"url":"https://security.netapp.com/advisory/ntap-20201218-0003/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.apache.org/thread.html/r769e1ba36c607772f7403e7ef2a8ae14d9ddcab4a844f9b28bcf7959%40%3Cdev.kafka.apache.org%3E","tags":["x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rc2b603b7fa7f8dbfe0b3b59a6140b4d66868db3bf4b29d69a772d72a%40%3Cdev.kafka.apache.org%3E","tags":["x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/ra1c234f045871827f73e4d68326b067e72d3139e109207345fa57d9e%40%3Cdev.kafka.apache.org%3E","tags":["x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.apache.org/thread.html/rfa34d2a3e423421a4a1354cf457edba2ce78cee2d3ebd8aab151a559%40%3Cdev.kafka.apache.org%3E","tags":["x_transferred","Issue Tracking","report","web"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","tags":["x_transferred","Patch","Third Party Advisory","advisory","fix","web"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","tags":["x_transferred","Patch","Third Party Advisory","advisory","fix","web"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_transferred","Patch","Third Party Advisory","advisory","fix","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27218","tags":["web","advisory"]},{"url":"https://lists.apache.org/thread.html/r22776d06582985cca5bd2a92519a2b13b4cae2d8e087318da03c036d@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r23ce6b8965e30808daa77a80fcd69833b1fc632d80465d0419eff619@%3Cissues.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r4981622ba15e8be1657d30b7c85044c7aabe89751fa7324f8604b834@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r6d5bb60a13e8b539600f86cb72097967b951de5c7ef1e4005cda74a7@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r8c839a0d88cd6504abbe72c260371094f47014b2ba08d8d2c0232e3c@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r8fee46fd9f1254150cc55eecf1ea6a448fca1f7cf1d1e7f9c4803fdb@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r9f571b086965b35d4e91e47fb67c27b42b62762248b4900ba723599f@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rbc5a8d7a0a13bc8152d427a7e9097cdeb139c6cfe111b2f00f26d16b@%3Cissues.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/re03a566114435a8cc8eb72158242b0f560c5eeccbb4ee98d22de8373@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/re86a6ba09dc74e709db843e3561ead923c8fd1cba32343656dd8c44b@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/ree677ff289ba9a90850f2e3ba7279555df1a170263ba39c5272db236@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rfa8879a713480b206c152334419499e6af0878c36217abcc9ab4f0d1@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r1dd302323c6fe1a542d0371de66a484918fa6c2831ae70d924974bea@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r602683484f607cd1b9598caf3e549fbb01c43fd46a582a32cc3bb545@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rb8f413dc923070919b09db3ac87d079a2dcc6f0adfbb029e206a7930@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rdde0ad0a03eec962c56b46e70e225918ea2368dcc3fd3488741fad53@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rde11c433675143d8d27551c3d9e821fe1955f1551a518033d3716553@%3Cdev.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rc0e35f4e8a8a36127e3ae7a67f325a3a6a4dbe05034130fb04b6f3b6@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r8f5b144e7a7c2b338f01139d891abbaba12a8173ee01110d21bd0b4d@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r46589f4228aabd5fb16135ff5bef0f77f06cdef64f9785ac3349fa02@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r5e5cb33b545548ec4684d33bd88b05a0ae89c4d7cac93eb63255f58f@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r70940cb30356642f0c49af49259680d6bd866f51c4e8de0f8a498fb0@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r821bbffb64da0f062b4e72d1aa600b91e26bc82a28298ab159121215@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r8be8c6f0e404a3179d988eb8afed03ede5f2d5ce986d3f709fb82610@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r964d226dd08527fddd7a44410c50daa9d34d398e5c4793f1d7e19da8@%3Ccommits.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r9d7a86fb0b45e5b1855d4df83a5820eef813d55eae3edf224f3d5055@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rc1de630c6ed9a958d9f811e816d6d8efb6ca94aed0869bc5cda9d7f8@%3Cissues.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rc91c405c08b529b7292c75d9bd497849db700a1297fe3432990f6774@%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r2a57c7bbf36afc87f8ad9e1dd2f53a08e85a1b531283fc2efce4fe17@%3Ccommits.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r078c1203e48089b2c934b9f86b61bebe8c049e0ea6273b124f349988@%3Cissues.hbase.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r186748e676e5aeb4eb603361e6367555ae4daecbde55cfd69fa68ec6@%3Cissues.hbase.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r2f168fd22c071bdd95ec696e45d2a01e928b9fcadbe94fbabeb1549d@%3Cissues.hbase.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r2ffe719224cbe5897f2d06dd22fc77fa12377c39efe9de0c3bf3f837@%3Cissues.hbase.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r3807b1c54066797c4870e03bd2376bdcce9c7c4e6143499f53cd9ca2@%3Cissues.hbase.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r3d43529452c5a16338e8267eb911e8aedc64c3241624302e673961c1@%3Cdev.hbase.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r8b2271909dabb45f0f1482ef35ffe106ae4b0cf8e877eb514e9cd421@%3Cissues.hbase.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r96ef6d20c5bd3d42dab500bac56a427e1dce00cf85b083987617643d@%3Cissues.hbase.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rcbc408088ae99dc3167ea293a562a3a9a7295a20e9a1bfc93e43ae1b@%3Cissues.hbase.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rccc7ba8c51d662e13496df20466d27dbab54d7001e9e7b2f31468a9e@%3Cissues.hbase.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rce9e232a663d8405c003fe83d5c86c27d1ed65561f3690e824717bc4@%3Cissues.hbase.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/re4ae7ada52c5ecfe805eb86ddc0af399ec8a57bfb0d8c632b8723b88@%3Cdev.hbase.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/re4e67541a0a25a8589e89f52f8cd163c863fe04b59e048f9f1a04958@%3Ccommits.hbase.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/re9214a4232b7ae204288c283bcee4e39f07da6cc34798e9217ba4eb6@%3Cissues.hbase.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r3554a4f192db6008c03f2c6c3e0f1691a9b0d615ce955ef67a876ff7@%3Cjira.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/racd55c9b704aa68cfb4436f17739b612b5d4f887155e04ed521a4b67@%3Cdev.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r00858fe27ee35ac8fa0e1549d67e0efb789d63b791b5300390bd8480@%3Cjira.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r7d37d33f2d68912985daf40203182e3d86f3e81266b7a7f350689eeb@%3Cjira.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r0d2de2ab5558da68b504bd30db74da1d97dc152a857f5b7e462288ab@%3Cissues.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r25a47cd06750ebb4b0f23a9b7a57c209702c8566a4c970a41ac088df@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r306c8e5aad1b9afc0c9278430fb571950fbb3ab7dd5d369eb618ffa4@%3Cissues.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r32a25679d97bf5969d130f8e9b3a3fc54110095397d89952e93dbeb0@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r489dfc3e259ad3837141985dd9291b93e6b40496cdf58808915d67e9@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r51ec0120b6c849d12fb7fef34db87ef0bf79fcfcd3d703a9800afbba@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r5464405909eb0e1059d5dd57d10c435b9f19325fdebbadb4f1126997@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r870bc5e6e354c3e28ea029cb5726c9e8dd2b88cb0f5f7de1d4e3133d@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r8c22aad0711321537183ccddcade7274ebf9dcbdcdacc6c4f90f43de@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/ra09a653997cbf10aab8c0deabc0fa49f5a8a8ce4305ce9089b98485f@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/racf9e6ad2482cb9b1e3e1b2c1b443d9d5cf14055fb54dec3d2dcce91@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rba4bca48d2cdfa8c08afc368a9cc4572ec85a5915ba29b8a194bf505@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rbe3f2e0a3c38ed9cbef81507b7cc6e523341865e30dc15c7503adc76@%3Cissues.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rdbdbb4e51f8857e082b464cd128decd7263cf0fb8557f12993562c56@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/reb75282901d0969ba6582725ce8672070715d0773f6ff54dedd60156@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rf31e24700f725ef81bc5a2e0444a60e1f295ed0a54c0098362a7bdfa@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r01806ad8c9cb0590584baf5b1a60237ad92e4ad5bba082ca04d98179@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r15500b77c52390e2ec048cea4a6b45edf907ea61cd13259193ff8601@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r2a541f08bf5f847394297c13a5305c2f76c11e46504ce2a49653890a@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r3b7c8bc7a1cb8acdcf7753f436564d289d22f2906e934d1b11de3a40@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r4aff5ca6bc94a6f13ff77914fd960185ab70cd6cebe96fffd74543ac@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r500e22d0aedba1866d0b5e76429b76652a473a0209fa8bf66c9f7aab@%3Ccommits.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r543ea0a861a78d84c22656fb76880d7ab327048cf7ee3ccc7281375d@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r5c64173663c71f222ea40617ab362d7a590935fb75c18817fdec377e@%3Ccommits.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r6493e43007f41e34cdbbb66622307fa235374dd2ec5bf52c61075a68@%3Cissues.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r706562cbbdda569cc556d8a7983d1f9229606e7b51337b820785af26@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r74ab0f5a5f16ca01eb145403ab753df5b348b8c1656d7c8501d0bfc6@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r81f82ab8ecb83568bafbecf9ce0e73be73980ac1e2af6baf0f344a59@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r850d1d0413716e8ba6d910cae7b01a0e560636e17d664769b5080ca5@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r8ed14a84656fa0bb8df3bf9373c5be80f47ceac1e2ff068ee734fdb3@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r8eea4c7797e701f6494c72942dd89f471cda4c2c6e9abbaf05d113d8@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r94230f46b91c364d39922a8ba0cfe12b8dba1556b14792719a7d921f@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rcf7b5818f71bb97fd695eb0f54f8f4f69e15cc5f9ec761ea8be0d0d3@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rd9a960429741406f6557fa344a13d50a0c9976dac2e4c46bb54b32d7@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r153fbefc27a1b2033692f32ef728ca909a7c7bcc1d21b6c35b38bdd5@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r39f1b1be8e5c0935f7c515eedf907909474bad15185125daacb36d50@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r7669dab41f2b34d56bb67700d869dc9c025ff72e9468204799f5ac29@%3Ccommits.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r9b46505868794fba04d401956304e63e4d8e39bdc118d30e5e87dcd9@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rb6a3866c02ac4446451c7d9dceab2373b6d32fb058f9085c6143de30@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/re014afaa14f4df9d33912ab64dc57249e1c170c7448d7175c6d014ff@%3Cissues.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/re3918edd403b0d3857a13ef2ccf3d2bc0231f3b8758e2a5777ea1cd3@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rf0181750e321518c8afa8001e0529d50a9447714ef4f58d98af57904@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rf273267fa2e49314643af3141cec239f97d41de8a59be4ef7e10c65a@%3Creviews.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r05b7ffde2b8c180709e14bc9ca036407bea3ed9f09b32c4705d23a4a@%3Cjira.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r380e9257bacb8551ee6fcf2c59890ae9477b2c78e553fa9ea08e9d9a@%3Ccommits.nifi.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r391d20ab6ec03d6becc7a9f0c5e0f45a7ad8af6b996ae0a49839f6bd@%3Cjira.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r4b2e7417a76e3dd4dc9855c6c138c49484080754a09927454f6d89f0@%3Cissues.spark.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r66456df852de06a0eed2c0a50252a2c8d360b8a5c005f63c0b1e3d25@%3Ccommits.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r769e1ba36c607772f7403e7ef2a8ae14d9ddcab4a844f9b28bcf7959@%3Cdev.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r942e21ee90e2617a00a08b17b0ac2db961959bec969b91df61584d38@%3Cdev.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r990e0296b188d4530d1053882f687fa4f938f108425db2999a180944@%3Ccommits.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/ra1c234f045871827f73e4d68326b067e72d3139e109207345fa57d9e@%3Cdev.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rb4ca79d1af5237108ce8770b7c46ca78095f62ef21331d9d06142388@%3Cjira.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rbbd003149f929b0e2fe58fb315de1658e98377225632e7e4239323fb@%3Ccommits.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rbea4d456d88b043be86739ab0200ad06ba5a7921064411c098f79831@%3Cjira.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rc2b603b7fa7f8dbfe0b3b59a6140b4d66868db3bf4b29d69a772d72a@%3Cdev.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rd20651e102cb6742a9d9322ea7b5fc3ab60a7ffecb50fa9157cbf176@%3Cjira.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rfa34d2a3e423421a4a1354cf457edba2ce78cee2d3ebd8aab151a559@%3Cdev.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r2fda4dab73097051977f2ab818f75e04fbcb15bb1003c8530eac1059@%3Cjira.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rd8e24a3e482e5984bc8c5492dc790413e4fdc1234e3debb94515796b@%3Cjira.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r352e40ca9874d1beb4ad95403792adca7eb295e6bc3bd7b65fabcc21@%3Ccommits.samza.apache.org%3E","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20201218-0003","tags":["web"]},{"url":"https://github.com/advisories/GHSA-86wm-rrjm-8wh8"},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-27218","tags":["advisory"]},{"url":"https://github.com/eclipse/jetty.project","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2431","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1891132","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1902826","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1934116","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952148","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952151","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952152","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972114","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2431.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-27216","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27216","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27216","tags":["advisory"]},{"url":"https://github.com/eclipse/jetty.project/security/advisories/GHSA-g3wg-6mcf-8jj6#advisory-comment-63053","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-27218","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27218","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-27223","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27223","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27223","tags":["advisory"]},{"url":"https://github.com/eclipse/jetty.project/security/advisories/GHSA-m394-8rww-3jr7","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21642","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21642","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21642","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2204","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21643","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21643","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21643","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2254","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21644","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21644","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21644","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21645","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21645","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21645","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2499","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2499.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2517","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1929718","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962884","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965827","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1973109","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1973123","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1974623","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2517.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203922-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1179727","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27218","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-27218","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V4MZVOK35CIZLLLRF4FF6YZSQWFZO7UA/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-34429","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-27218","description":"In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacker can send a request with a body that is received entirely but not consumed by the application, then a subsequent request on the same connection will see that body prepended to its body. The attacker will not see any data but may inject data into the body of the subsequent request.","status":"published","published":"2020-11-28T00:00:00Z","modified":"2024-08-04T16:11:36.083Z","cwes":["CWE-226"],"updated_at":"2026-11-02T14:35:53.552996Z"}],"euvd":[{"id":"EUVD-2020-1488","description":"In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacker can send a request with a body that is received entirely but not consumed by the application, then a subsequent request on the same connection will see that body prepended to its body. The attacker will not see any data but may inject data into the body of the subsequent request.","status":"published","published":"2020-11-28T00:00:00Z","modified":"2024-08-04T16:11:36Z","updated_at":"2026-11-03T03:07:13.515696Z"}],"ghsa":[{"id":"GHSA-86wm-rrjm-8wh8","title":"Buffer not correctly recycled in Gzip Request inflation","description":"### Impact\nIf GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection and if an \nattacker can send a request with a body that is received entirely by not consumed by the application, then a subsequent request\non the same connection will see that body prepended to it's body.\n\nThe attacker will not see any data, but may inject data into the body of the subsequent request\n\nCVE score is [4.8 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L](https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L\u0026version=3.1)\n\n### Workarounds\nThe problem can be worked around by either:\n- Disabling compressed request body inflation by GzipHandler.\n- By always fully consuming the request content before sending a response.\n- By adding a `Connection: close` to any response where the servlet does not fully consume request content.","status":"published","published":"2020-12-02T18:28:18Z","modified":"2024-02-21T17:23:14Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-226"],"updated_at":"2026-11-02T14:37:38.20753Z"}],"nvd":[{"id":"CVE-2020-27218","description":"In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacker can send a request with a body that is received entirely but not consumed by the application, then a subsequent request on the same connection will see that body prepended to its body. The attacker will not see any data but may inject data into the body of the subsequent request.","status":"published","published":"2020-11-28T01:15:11.587Z","modified":"2026-06-17T03:08:58.453Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"primary"},{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-226"],"updated_at":"2026-11-02T14:06:25.394006Z"}],"osv":[{"id":"CVE-2020-27218","description":"In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacker can send a request with a body that is received entirely but not consumed by the application, then a subsequent request on the same connection will see that body prepended to its body. The attacker will not see any data but may inject data into the body of the subsequent request.","status":"published","published":"2020-11-28T01:15:11.587Z","modified":"2026-10-24T10:47:49.003908783Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:16.248747Z"},{"id":"DEBIAN-CVE-2020-27218","description":"In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacker can send a request with a body that is received entirely but not consumed by the application, then a subsequent request on the same connection will see that body prepended to its body. The attacker will not see any data but may inject data into the body of the subsequent request.","status":"published","published":"2020-11-28T01:15:11.587Z","modified":"2026-10-26T12:02:41.838892802Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:33.729655Z"},{"id":"GHSA-86wm-rrjm-8wh8","title":"Buffer not correctly recycled in Gzip Request inflation","description":"### Impact\nIf GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection and if an \nattacker can send a request with a body that is received entirely by not consumed by the application, then a subsequent request\non the same connection will see that body prepended to it's body.\n\nThe attacker will not see any data, but may inject data into the body of the subsequent request\n\nCVE score is [4.8 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L](https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L\u0026version=3.1)\n\n### Workarounds\nThe problem can be worked around by either:\n- Disabling compressed request body inflation by GzipHandler.\n- By always fully consuming the request content before sending a response.\n- By adding a `Connection: close` to any response where the servlet does not fully consume request content.","status":"published","published":"2020-12-02T18:28:18Z","modified":"2026-07-08T06:00:56.816969757Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-226"],"updated_at":"2026-11-02T15:46:42.077781Z"},{"id":"RHSA-2021:2431","title":"Red Hat Security Advisory: OpenShift Container Platform 4.5.41 security update","status":"published","published":"2024-09-16T05:56:15Z","modified":"2026-10-13T10:02:21Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:2499","title":"Red Hat Security Advisory: OpenShift Container Platform 4.6.36 security update","status":"published","published":"2024-09-14T00:42:48Z","modified":"2026-10-13T10:02:22Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:2517","title":"Red Hat Security Advisory: OpenShift Container Platform 3.11.462 bug fix and security update","status":"published","published":"2024-09-16T05:56:07Z","modified":"2026-10-13T10:02:22Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"UBUNTU-CVE-2020-27218","description":"In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacker can send a request with a body that is received entirely but not consumed by the application, then a subsequent request on the same connection will see that body prepended to its body. The attacker will not see any data but may inject data into the body of the subsequent request.","status":"published","published":"2020-11-28T01:15:00Z","modified":"2025-10-24T04:48:50Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:54:24.541803Z"},{"id":"BIT-kafka-2020-27218","description":"In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacker can send a request with a body that is received entirely but not consumed by the application, then a subsequent request on the same connection will see that body prepended to its body. The attacker will not see any data but may inject data into the body of the subsequent request.","status":"published","published":"2024-03-06T10:54:41.9Z","modified":"2026-09-08T08:48:23.889200303Z","updated_at":"2026-11-02T15:28:31.782692Z"},{"id":"BIT-spark-2020-27218","description":"In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacker can send a request with a body that is received entirely but not consumed by the application, then a subsequent request on the same connection will see that body prepended to its body. The attacker will not see any data but may inject data into the body of the subsequent request.","status":"published","published":"2024-03-06T11:06:19.374Z","modified":"2026-09-08T08:48:19.392269379Z","updated_at":"2026-11-02T15:28:35.111822Z"},{"id":"DLA-3641-1","title":"jetty9 - security update","status":"published","published":"2023-10-30T00:00:00Z","modified":"2026-03-09T01:21:19.737369Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"openSUSE-SU-2021:0012-1","title":"Security update for jetty-minimal","description":"This update for jetty-minimal fixes the following issues:\n\n- jetty-minimal was upgraded to version 9.4.35.v20201120\n- CVE-2020-27218: Fixed an issue where buffer not correctly recycled in Gzip Request inflation (bsc#1179727).\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2021-01-04T11:23:19Z","modified":"2026-02-04T02:36:59.392305Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2024:10878-1","title":"jetty-annotations-9.4.43-1.2 on GA media","description":"These are all security issues fixed in the jetty-annotations-9.4.43-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:44:09.055501Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2020:3922-1","title":"Security update for jetty-minimal","description":"This update for jetty-minimal fixes the following issues:\n\n- jetty-minimal was upgraded to version 9.4.35.v20201120\n- CVE-2020-27218: Fixed an issue where buffer not correctly recycled in Gzip Request inflation (bsc#1179727).\n","status":"published","published":"2020-12-22T14:20:51Z","modified":"2026-02-04T03:10:29.076877Z","updated_at":"2026-11-02T15:53:48.690034Z"}]}}