{"id":"CVE-2023-26049","aliases":["CLSA-2026-1775003156","CLSA-2026-1778546718","CLSA-2026-1779065189","CLSA-2026-1779151632","CLSA-2026-1779842950","CLSA-2026-1787550865","CLSA-2026-1794182179","DEBIAN-CVE-2023-26049","DLA-3592-1","DSA-5507-1","EUVD-2023-1360","GHSA-58qw-p7qm-5rvh","GHSA-p26g-97m4-6q7c","RHSA-2023:7637","RHSA-2023:7638","RHSA-2023:7639","RHSA-2024:0778","RHSA-2024:0797","RHSA-2024:0798","RHSA-2024:0799","RHSA-2024:0800","SUSE-SU-2023:2539-1","UBUNTU-CVE-2023-26049","openSUSE-SU-2024:12949-1"],"status":"published","title":"Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty","description":"Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a cookie VALUE that starts with `\"` (double quote), it will continue to read the cookie string until it sees a closing quote -- even if a semicolon is encountered. So, a cookie header such as: `DISPLAY_LANGUAGE=\"b; JSESSIONID=1337; c=d\"` will be parsed as one cookie, with the name DISPLAY_LANGUAGE and a value of b; JSESSIONID=1337; c=d instead of 3 separate cookies. This has security implications because if, say, JSESSIONID is an HttpOnly cookie, and the DISPLAY_LANGUAGE cookie value is rendered on the page, an attacker can smuggle the JSESSIONID cookie into the DISPLAY_LANGUAGE cookie and thereby exfiltrate it. This is significant when an intermediary is enacting some policy based on cookies, so a smuggled cookie can bypass that policy yet still be seen by the Jetty server or its logging system. This issue has been addressed in versions 9.4.51, 10.0.14, 11.0.14, and 12.0.0.beta0 and users are advised to upgrade. There are no known workarounds for this issue.","severity":{"version":"3.1","score":2.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.013,"percentile":0.70681,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-200","CWE-611"],"published":"2023-04-18T20:35:36Z","modified":"2026-11-10T19:58:30Z","exploits":[{"source":"pocgithub","id":"uthrasri/jetty-9.4.31.v20200723_CVE-2023-26049","title":"uthrasri/jetty-9.4.31.v20200723_CVE-2023-26049","date":"2023-11-01","url":"https://github.com/uthrasri/jetty-9.4.31.v20200723_CVE-2023-26049"}],"fixes":[{"ecosystem":"Maven","package":"org.eclipse.jetty:jetty-xml","fixed_in":["11.0.16","10.0.16","12.0.0","9.4.52.v20230823"],"sources":["ghsa","osv"]},{"ecosystem":"Maven","package":"org.eclipse.jetty:jetty-server","fixed_in":["10.0.14","11.0.14","12.0.0.beta0","9.4.51.v20230217"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-server","fixed_in":["7.6.0.v20120127-tuxcare.3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"jetty9","fixed_in":["9.4.50-4+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"jetty9","fixed_in":["9.4.52-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"jetty9","fixed_in":["9.4.52-1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.eclipse.jetty:jetty-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.0-alpha0"},{"last_affected":"11.0.15"},{"fixed":"11.0.16"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.eclipse.jetty:jetty-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.0-alpha0"},{"last_affected":"10.0.15"},{"fixed":"10.0.16"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.eclipse.jetty:jetty-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.0.0.alpha0"},{"last_affected":"12.0.0.beta4"},{"fixed":"12.0.0"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.eclipse.jetty:jetty-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"9.4.51"},{"fixed":"9.4.52.v20230823"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.eclipse.jetty:jetty-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.0"},{"fixed":"10.0.14"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.eclipse.jetty:jetty-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.0"},{"fixed":"11.0.14"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.eclipse.jetty:jetty-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.0.0alpha0"},{"fixed":"12.0.0.beta0"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.eclipse.jetty:jetty-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.51.v20230217"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.2.0.v20160908"},{"fixed":"8.2.0.v20160908-tuxcare.2"}]}],"versions":["8.2.0.v20160908","8.2.0.v20160908-tuxcare.1"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-servlets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.2.0.v20160908"},{"fixed":"8.2.0.v20160908-tuxcare.2"}]}],"versions":["8.2.0.v20160908","8.2.0.v20160908-tuxcare.1"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.http2:http2-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.50.v20221201"},{"fixed":"9.4.50.v20221201-tuxcare.1"}]}],"versions":["9.4.50.v20221201"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.http2:http2-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.50.v20221201"},{"fixed":"9.4.50.v20221201-tuxcare.1"}]}],"versions":["9.4.50.v20221201"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.50.v20221201"},{"fixed":"9.4.50.v20221201-tuxcare.1"}]}],"versions":["9.4.50.v20221201"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-openid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.50.v20221201"},{"fixed":"9.4.50.v20221201-tuxcare.1"}]}],"versions":["9.4.50.v20221201"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.50.v20221201"},{"fixed":"9.4.50.v20221201-tuxcare.1"}]}],"versions":["9.4.50.v20221201"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-servlets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.50.v20221201"},{"fixed":"9.4.50.v20221201-tuxcare.1"}]}],"versions":["9.4.50.v20221201"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.50.v20221201"},{"fixed":"9.4.50.v20221201-tuxcare.1"}]}],"versions":["9.4.50.v20221201"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.41.v20210516"},{"fixed":"9.4.41.v20210516-tuxcare.1"}]}],"versions":["9.4.41.v20210516"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.41.v20210516"},{"fixed":"9.4.41.v20210516-tuxcare.1"}]}],"versions":["9.4.41.v20210516"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-servlets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.41.v20210516"},{"fixed":"9.4.41.v20210516-tuxcare.1"}]}],"versions":["9.4.41.v20210516"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.41.v20210516"},{"fixed":"9.4.41.v20210516-tuxcare.1"}]}],"versions":["9.4.41.v20210516"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.http2:http2-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.24.v20191120"},{"fixed":"9.4.24.v20191120-tuxcare.2"}]}],"versions":["9.4.24.v20191120","9.4.24.v20191120-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.24.v20191120"},{"fixed":"9.4.24.v20191120-tuxcare.2"}]}],"versions":["9.4.24.v20191120","9.4.24.v20191120-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.http2:http2-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.48.v20220622"},{"fixed":"9.4.48.v20220622-tuxcare.2"}]}],"versions":["9.4.48.v20220622","9.4.48.v20220622-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-openid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.48.v20220622"},{"fixed":"9.4.48.v20220622-tuxcare.2"}]}],"versions":["9.4.48.v20220622","9.4.48.v20220622-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.48.v20220622"},{"fixed":"9.4.48.v20220622-tuxcare.2"}]}],"versions":["9.4.48.v20220622","9.4.48.v20220622-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-servlets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.48.v20220622"},{"fixed":"9.4.48.v20220622-tuxcare.2"}]}],"versions":["9.4.48.v20220622","9.4.48.v20220622-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.48.v20220622"},{"fixed":"9.4.48.v20220622-tuxcare.2"}]}],"versions":["9.4.48.v20220622","9.4.48.v20220622-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.6.0.v20120127"},{"fixed":"7.6.0.v20120127-tuxcare.3"}]}],"versions":["7.6.0.v20120127","7.6.0.v20120127-tuxcare.1","7.6.0.v20120127-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.http2:http2-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.26"},{"fixed":"10.0.26-tuxcare.4"}]}],"versions":["10.0.26","10.0.26-tuxcare.1","10.0.26-tuxcare.2","10.0.26-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.26"},{"fixed":"10.0.26-tuxcare.4"}]}],"versions":["10.0.26","10.0.26-tuxcare.1","10.0.26-tuxcare.2","10.0.26-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.26"},{"fixed":"10.0.26-tuxcare.4"}]}],"versions":["10.0.26","10.0.26-tuxcare.1","10.0.26-tuxcare.2","10.0.26-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"jetty9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.50-4+deb12u1"}]}],"versions":["9.4.50-4"]},{"source":"osv","ecosystem":"Debian:13","package":"jetty9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.52-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"jetty9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.52-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"jetty9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.16-0+deb10u3"}]}],"versions":["9.4.15-1","9.4.16-0+deb10u1","9.4.16-0+deb10u2"],"bundled":4},{"source":"osv","ecosystem":"Debian:11","package":"jetty9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.39-3+deb11u2"}]}],"versions":["9.4.39-3","9.4.39-3+deb11u1"],"bundled":5},{"source":"osv","ecosystem":"Debian:12","package":"jetty9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.50-4+deb12u1"}]}],"versions":["9.4.50-4"],"bundled":5},{"source":"osv","ecosystem":"Maven","package":"org.eclipse.jetty:jetty-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.0-alpha0"},{"fixed":"10.0.16"}]}],"versions":["10.0.0","10.0.0-alpha0","10.0.0.alpha1","10.0.0.alpha2","10.0.0.beta0","10.0.0.beta1","10.0.0.beta2","10.0.0.beta3","10.0.1","10.0.10","10.0.11","10.0.12","10.0.13","10.0.14","10.0.15","10.0.2","10.0.3","10.0.4","10.0.5","10.0.6","10.0.7","10.0.8","10.0.9"]},{"source":"osv","ecosystem":"Maven","package":"org.eclipse.jetty:jetty-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.0-alpha0"},{"fixed":"11.0.16"}]}],"versions":["11.0.0","11.0.0-alpha0","11.0.0.beta1","11.0.0.beta2","11.0.0.beta3","11.0.1","11.0.10","11.0.11","11.0.12","11.0.13","11.0.14","11.0.15","11.0.2","11.0.3","11.0.4","11.0.5","11.0.6","11.0.7","11.0.8","11.0.9"]},{"source":"osv","ecosystem":"Maven","package":"org.eclipse.jetty:jetty-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.0.0.alpha0"},{"fixed":"12.0.0"}]}],"versions":["12.0.0.alpha0","12.0.0.alpha1","12.0.0.alpha2","12.0.0.alpha3","12.0.0.beta0","12.0.0.beta1","12.0.0.beta2","12.0.0.beta3","12.0.0.beta4"]},{"source":"osv","ecosystem":"Maven","package":"org.eclipse.jetty:jetty-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.52.v20230823"}]}],"versions":["7.0.0.M0","7.0.0.M1","7.0.0.M2","7.0.0.M3","7.0.0.M4","7.0.0.RC0","7.0.0.RC1","7.0.0.RC2","7.0.0.RC3","7.0.0.RC4","7.0.0.RC5","7.0.0.RC6","7.0.0.v20091005","7.0.1.v20091125","7.0.2.RC0","7.0.2.v20100331","7.1.0.RC0","7.1.0.RC1","7.1.0.v20100505","7.1.1.v20100517","7.1.2.v20100523","7.1.3.v20100526","7.1.4.v20100610","7.1.5.v20100705","7.1.6.v20100715","7.2.0.RC0","7.2.0.v20101020","7.2.1.v20101111","7.2.2.v20101205","7.3.0.v20110203","7.3.1.v20110307","7.4.0.RC0","7.4.0.v20110414","7.4.1.v20110513","7.4.2.v20110526","7.4.3.v20110701","7.4.4.v20110707","7.4.5.v20110725","7.5.0.RC0","7.5.0.RC1","7.5.0.RC2","7.5.0.v20110901","7.5.1.v20110908","7.5.2.v20111006","7.5.3.v20111011","7.5.4.v20111024","7.6.0.RC0","7.6.0.RC1","7.6.0.RC2","7.6.0.RC3","7.6.0.RC4","7.6.0.RC5","7.6.0.v20120127","7.6.1.v20120215","7.6.10.v20130312","7.6.11.v20130520","7.6.12.v20130726","7.6.13.v20130916","7.6.14.v20131031","7.6.15.v20140411","7.6.16.v20140903","7.6.17.v20150415","7.6.18.v20150929","7.6.19.v20160209","7.6.2.v20120308","7.6.20.v20160902","7.6.21.v20160908","7.6.3.v20120416","7.6.4.v20120524","7.6.5.v20120716","7.6.6.v20120903","7.6.7.v20120910","7.6.8.v20121106","7.6.9.v20130131","8.0.0.M0","8.0.0.M1","8.0.0.M2","8.0.0.M3","8.0.0.RC0","8.0.0.v20110901","8.0.1.v20110908","8.0.2.v20111006","8.0.3.v20111011","8.0.4.v20111024","8.1.0.RC0","8.1.0.RC1","8.1.0.RC2","8.1.0.RC4","8.1.0.RC5","8.1.0.v20120127","8.1.1.v20120215","8.1.10.v20130312","8.1.11.v20130520","8.1.12.v20130726","8.1.13.v20130916","8.1.14.v20131031","8.1.15.v20140411","8.1.16.v20140903","8.1.17.v20150415","8.1.18.v20150929","8.1.19.v20160209","8.1.2.v20120308","8.1.20.v20160902","8.1.21.v20160908","8.1.22.v20160922","8.1.3.v20120416","8.1.4.v20120524","8.1.5.v20120716","8.1.6.v20120903","8.1.7.v20120910","8.1.8.v20121106","8.1.9.v20130131","8.2.0.v20160908","9.0.0.M0","9.0.0.M1","9.0.0.M2","9.0.0.M3","9.0.0.M4","9.0.0.M5","9.0.0.RC0","9.0.0.RC1","9.0.0.RC2","9.0.0.v20130308","9.0.1.v20130408","9.0.2.v20130417","9.0.3.v20130506","9.0.4.v20130625","9.0.5.v20130815","9.0.6.v20130930","9.0.7.v20131107","9.1.0.M0","9.1.0.RC0","9.1.0.RC1","9.1.0.RC2","9.1.0.v20131115","9.1.1.v20140108","9.1.2.v20140210","9.1.3.v20140225","9.1.4.v20140401","9.1.5.v20140505","9.1.6.v20160112","9.2.0.M0","9.2.0.M1","9.2.0.RC0","9.2.0.v20140526","9.2.1.v20140609","9.2.10.v20150310","9.2.11.M0","9.2.11.v20150529","9.2.12.M0","9.2.12.v20150709","9.2.13.v20150730","9.2.14.v20151106","9.2.15.v20160210","9.2.16.v20160414","9.2.17.v20160517","9.2.18.v20160721","9.2.19.v20160908","9.2.2.v20140723","9.2.20.v20161216","9.2.21.v20170120","9.2.22.v20170606","9.2.23.v20171218","9.2.24.v20180105","9.2.25.v20180606","9.2.26.v20180806","9.2.27.v20190403","9.2.28.v20190418","9.2.29.v20191105","9.2.3.v20140905","9.2.30.v20200428","9.2.4.v20141103","9.2.5.v20141112","9.2.6.v20141205","9.2.7.v20150116","9.2.8.v20150217","9.2.9.v20150224","9.3.0.M0","9.3.0.M1","9.3.0.M2","9.3.0.RC0","9.3.0.RC1","9.3.0.v20150612","9.3.1.v20150714","9.3.10.M0","9.3.10.v20160621","9.3.11.M0","9.3.11.v20160721","9.3.12.v20160915","9.3.13.M0","9.3.13.v20161014","9.3.14.v20161028","9.3.15.v20161220","9.3.16.v20170120","9.3.17.RC0","9.3.17.v20170317","9.3.18.v20170406","9.3.19.v20170502","9.3.2.v20150730","9.3.20.v20170531","9.3.21.M0","9.3.21.RC0","9.3.21.v20170918","9.3.22.v20171030","9.3.23.v20180228","9.3.24.v20180605","9.3.25.v20180904","9.3.26.v20190403","9.3.27.v20190418","9.3.28.v20191105","9.3.29.v20201019","9.3.3.v20150827","9.3.30.v20211001","9.3.4.RC0","9.3.4.RC1","9.3.4.v20151007","9.3.5.v20151012","9.3.6.v20151106","9.3.7.RC0","9.3.7.RC1","9.3.7.v20160115","9.3.8.RC0","9.3.8.v20160314","9.3.9.M0","9.3.9.M1","9.3.9.v20160517","9.4.0.M0","9.4.0.M1","9.4.0.RC0","9.4.0.RC1","9.4.0.RC2","9.4.0.RC3","9.4.0.v20161208","9.4.0.v20180619","9.4.1.v20170120","9.4.1.v20180619","9.4.10.RC0","9.4.10.RC1","9.4.10.v20180503","9.4.11.v20180605","9.4.12.RC0","9.4.12.RC1","9.4.12.RC2","9.4.12.v20180830","9.4.13.v20181111","9.4.14.v20181114","9.4.15.v20190215","9.4.16.v20190411","9.4.17.v20190418","9.4.18.v20190429","9.4.19.v20190610","9.4.2.v20170220","9.4.2.v20180619","9.4.20.v20190813","9.4.21.v20190926","9.4.22.v20191022","9.4.23.v20191118","9.4.24.v20191120","9.4.25.v20191220","9.4.26.v20200117","9.4.27.v20200227","9.4.28.v20200408","9.4.29.v20200521","9.4.3.v20170317","9.4.3.v20180619","9.4.30.v20200611","9.4.31.v20200723","9.4.32.v20200930","9.4.33.v20201020","9.4.34.v20201102","9.4.35.v20201120","9.4.36.v20210114","9.4.37.v20210219","9.4.38.v20210224","9.4.39.v20210325","9.4.4.v20170414","9.4.4.v20180619","9.4.40.v20210413","9.4.41.v20210516","9.4.42.v20210604","9.4.43.v20210629","9.4.44.v20210927","9.4.45.v20220203","9.4.46.v20220331","9.4.47.v20220610","9.4.48.v20220622","9.4.49.v20220914","9.4.5.v20170502","9.4.5.v20180619","9.4.50.v20221201","9.4.51.v20230217","9.4.6.v20170531","9.4.6.v20180619","9.4.7.RC0","9.4.7.v20170914","9.4.7.v20180619","9.4.8.v20171121","9.4.8.v20180619","9.4.9.v20180320"]},{"source":"osv","ecosystem":"Maven","package":"org.eclipse.jetty:jetty-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.51.v20230217"}]}],"versions":["7.0.0.M0","7.0.0.M1","7.0.0.M2","7.0.0.M3","7.0.0.M4","7.0.0.RC0","7.0.0.RC1","7.0.0.RC2","7.0.0.RC3","7.0.0.RC4","7.0.0.RC5","7.0.0.RC6","7.0.0.v20091005","7.0.1.v20091125","7.0.2.RC0","7.0.2.v20100331","7.1.0.RC0","7.1.0.RC1","7.1.0.v20100505","7.1.1.v20100517","7.1.2.v20100523","7.1.3.v20100526","7.1.4.v20100610","7.1.5.v20100705","7.1.6.v20100715","7.2.0.RC0","7.2.0.v20101020","7.2.1.v20101111","7.2.2.v20101205","7.3.0.v20110203","7.3.1.v20110307","7.4.0.RC0","7.4.0.v20110414","7.4.1.v20110513","7.4.2.v20110526","7.4.3.v20110701","7.4.4.v20110707","7.4.5.v20110725","7.5.0.RC0","7.5.0.RC1","7.5.0.RC2","7.5.0.v20110901","7.5.1.v20110908","7.5.2.v20111006","7.5.3.v20111011","7.5.4.v20111024","7.6.0.RC0","7.6.0.RC1","7.6.0.RC2","7.6.0.RC3","7.6.0.RC4","7.6.0.RC5","7.6.0.v20120127","7.6.1.v20120215","7.6.10.v20130312","7.6.11.v20130520","7.6.12.v20130726","7.6.13.v20130916","7.6.14.v20131031","7.6.15.v20140411","7.6.16.v20140903","7.6.17.v20150415","7.6.18.v20150929","7.6.19.v20160209","7.6.2.v20120308","7.6.20.v20160902","7.6.21.v20160908","7.6.3.v20120416","7.6.4.v20120524","7.6.5.v20120716","7.6.6.v20120903","7.6.7.v20120910","7.6.8.v20121106","7.6.9.v20130131","8.0.0.M0","8.0.0.M1","8.0.0.M2","8.0.0.M3","8.0.0.RC0","8.0.0.v20110901","8.0.1.v20110908","8.0.2.v20111006","8.0.3.v20111011","8.0.4.v20111024","8.1.0.RC0","8.1.0.RC1","8.1.0.RC2","8.1.0.RC4","8.1.0.RC5","8.1.0.v20120127","8.1.1.v20120215","8.1.10.v20130312","8.1.11.v20130520","8.1.12.v20130726","8.1.13.v20130916","8.1.14.v20131031","8.1.15.v20140411","8.1.16.v20140903","8.1.17.v20150415","8.1.18.v20150929","8.1.19.v20160209","8.1.2.v20120308","8.1.20.v20160902","8.1.21.v20160908","8.1.22.v20160922","8.1.3.v20120416","8.1.4.v20120524","8.1.5.v20120716","8.1.6.v20120903","8.1.7.v20120910","8.1.8.v20121106","8.1.9.v20130131","8.2.0.v20160908","9.0.0.M0","9.0.0.M1","9.0.0.M2","9.0.0.M3","9.0.0.M4","9.0.0.M5","9.0.0.RC0","9.0.0.RC1","9.0.0.RC2","9.0.0.v20130308","9.0.1.v20130408","9.0.2.v20130417","9.0.3.v20130506","9.0.4.v20130625","9.0.5.v20130815","9.0.6.v20130930","9.0.7.v20131107","9.1.0.M0","9.1.0.RC0","9.1.0.RC1","9.1.0.RC2","9.1.0.v20131115","9.1.1.v20140108","9.1.2.v20140210","9.1.3.v20140225","9.1.4.v20140401","9.1.5.v20140505","9.1.6.v20160112","9.2.0.M0","9.2.0.M1","9.2.0.RC0","9.2.0.v20140526","9.2.1.v20140609","9.2.10.v20150310","9.2.11.M0","9.2.11.v20150529","9.2.12.M0","9.2.12.v20150709","9.2.13.v20150730","9.2.14.v20151106","9.2.15.v20160210","9.2.16.v20160414","9.2.17.v20160517","9.2.18.v20160721","9.2.19.v20160908","9.2.2.v20140723","9.2.20.v20161216","9.2.21.v20170120","9.2.22.v20170606","9.2.23.v20171218","9.2.24.v20180105","9.2.25.v20180606","9.2.26.v20180806","9.2.27.v20190403","9.2.28.v20190418","9.2.29.v20191105","9.2.3.v20140905","9.2.30.v20200428","9.2.4.v20141103","9.2.5.v20141112","9.2.6.v20141205","9.2.7.v20150116","9.2.8.v20150217","9.2.9.v20150224","9.3.0.M0","9.3.0.M1","9.3.0.M2","9.3.0.RC0","9.3.0.RC1","9.3.0.v20150612","9.3.1.v20150714","9.3.10.M0","9.3.10.v20160621","9.3.11.M0","9.3.11.v20160721","9.3.12.v20160915","9.3.13.M0","9.3.13.v20161014","9.3.14.v20161028","9.3.15.v20161220","9.3.16.v20170120","9.3.17.RC0","9.3.17.v20170317","9.3.18.v20170406","9.3.19.v20170502","9.3.2.v20150730","9.3.20.v20170531","9.3.21.M0","9.3.21.RC0","9.3.21.v20170918","9.3.22.v20171030","9.3.23.v20180228","9.3.24.v20180605","9.3.25.v20180904","9.3.26.v20190403","9.3.27.v20190418","9.3.28.v20191105","9.3.29.v20201019","9.3.3.v20150827","9.3.30.v20211001","9.3.4.RC0","9.3.4.RC1","9.3.4.v20151007","9.3.5.v20151012","9.3.6.v20151106","9.3.7.RC0","9.3.7.RC1","9.3.7.v20160115","9.3.8.RC0","9.3.8.v20160314","9.3.9.M0","9.3.9.M1","9.3.9.v20160517","9.4.0.M0","9.4.0.M1","9.4.0.RC0","9.4.0.RC1","9.4.0.RC2","9.4.0.RC3","9.4.0.v20161208","9.4.0.v20180619","9.4.1.v20170120","9.4.1.v20180619","9.4.10.RC0","9.4.10.RC1","9.4.10.v20180503","9.4.11.v20180605","9.4.12.RC0","9.4.12.RC1","9.4.12.RC2","9.4.12.v20180830","9.4.13.v20181111","9.4.14.v20181114","9.4.15.v20190215","9.4.16.v20190411","9.4.17.v20190418","9.4.18.v20190429","9.4.19.v20190610","9.4.2.v20170220","9.4.2.v20180619","9.4.20.v20190813","9.4.21.v20190926","9.4.22.v20191022","9.4.23.v20191118","9.4.24.v20191120","9.4.25.v20191220","9.4.26.v20200117","9.4.27.v20200227","9.4.28.v20200408","9.4.29.v20200521","9.4.3.v20170317","9.4.3.v20180619","9.4.30.v20200611","9.4.31.v20200723","9.4.32.v20200930","9.4.33.v20201020","9.4.34.v20201102","9.4.35.v20201120","9.4.36.v20210114","9.4.37.v20210219","9.4.38.v20210224","9.4.39.v20210325","9.4.4.v20170414","9.4.4.v20180619","9.4.40.v20210413","9.4.41.v20210516","9.4.42.v20210604","9.4.43.v20210629","9.4.44.v20210927","9.4.45.v20220203","9.4.46.v20220331","9.4.47.v20220610","9.4.48.v20220622","9.4.49.v20220914","9.4.5.v20170502","9.4.5.v20180619","9.4.50.v20221201","9.4.6.v20170531","9.4.6.v20180619","9.4.7.RC0","9.4.7.v20170914","9.4.7.v20180619","9.4.8.v20171121","9.4.8.v20180619","9.4.9.v20180320"]},{"source":"osv","ecosystem":"Maven","package":"org.eclipse.jetty:jetty-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.0"},{"fixed":"10.0.14"}]}],"versions":["10.0.0","10.0.1","10.0.10","10.0.11","10.0.12","10.0.13","10.0.2","10.0.3","10.0.4","10.0.5","10.0.6","10.0.7","10.0.8","10.0.9"]},{"source":"osv","ecosystem":"Maven","package":"org.eclipse.jetty:jetty-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.0"},{"fixed":"11.0.14"}]}],"versions":["11.0.0","11.0.1","11.0.10","11.0.11","11.0.12","11.0.13","11.0.2","11.0.3","11.0.4","11.0.5","11.0.6","11.0.7","11.0.8","11.0.9"]},{"source":"osv","ecosystem":"Maven","package":"org.eclipse.jetty:jetty-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.0.0alpha0"},{"fixed":"12.0.0.beta0"}]}],"versions":["12.0.0.alpha0","12.0.0.alpha1","12.0.0.alpha2","12.0.0.alpha3"]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:32.1.1-2.jre_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-guava-libraries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:32.1.1-2.jre_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.28-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.11-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-apache-sshd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-1.redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.3-1.redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.20-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hibernate-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hibernate-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-cachestore-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-cachestore-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-client-hotrod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-component-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-hibernate-cache-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-hibernate-cache-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-hibernate-cache-v53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jandex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.4-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-jsp-api_2.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-marshalling-river","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jbossws-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.9-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jgroups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.23-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-core-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-ejb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-jta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-probe-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.16-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-yasson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.11-4.redhat_00002.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:32.1.1-2.jre_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-guava-libraries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:32.1.1-2.jre_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.28-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.11-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-apache-sshd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-1.redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.3-1.redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.20-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hibernate-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hibernate-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-cachestore-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-cachestore-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-client-hotrod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-component-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-hibernate-cache-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-hibernate-cache-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-hibernate-cache-v53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jandex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.4-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-jsp-api_2.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-marshalling-river","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jbossws-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.9-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jgroups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.23-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-core-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-ejb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-jta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-probe-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.16-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-yasson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.11-4.redhat_00002.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:32.1.1-2.jre_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-guava-libraries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:32.1.1-2.jre_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.28-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.11-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-apache-sshd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-1.redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.3-1.redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.20-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-cachestore-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-cachestore-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-client-hotrod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-component-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-hibernate-cache-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-hibernate-cache-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-hibernate-cache-v53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jandex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.4-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-jsp-api_2.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-marshalling-river","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jbossws-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.9-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jgroups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.23-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-core-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-ejb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-jta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-probe-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.16-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-yasson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.11-4.redhat_00002.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.12::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.1706515741-1.el8"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.12::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.426.3.1706515686-3.el8"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"mosquitto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.17-1.el8sat"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"mosquitto-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.17-1.el8sat"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"mosquitto-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.17-1.el8sat"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"mosquitto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.17-1.el8sat"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"mosquitto-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.17-1.el8sat"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"mosquitto-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.17-1.el8sat"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"rubygem-grpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.58.0-1.el8sat"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"puppetserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.14.0-1.el8sat"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"puppetserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.14.0-1.el8sat"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"rubygem-sidekiq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.5.12-1.el8sat"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"candlepin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.11-1.el8sat"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"candlepin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.11-1.el8sat"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"puppet-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.27.0-1.el8sat"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"puppet-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.27.0-1.el8sat"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.1-1.el8sat"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"rubygem-puma-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.1-1.el8sat"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"rubygem-puma-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.1-1.el8sat"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el7","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.12-1.redhat_00001.1.el7sso"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el7","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.12-1.redhat_00001.1.el7sso"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el8","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.12-1.redhat_00001.1.el8sso"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el8","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.12-1.redhat_00001.1.el8sso"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el9","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.12-1.redhat_00001.1.el9sso"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el9","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.12-1.redhat_00001.1.el9sso"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"jetty-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.51-150200.3.19.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"jetty-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.51-150200.3.19.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"jetty-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.51-150200.3.19.2"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"jetty-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.51-150200.3.19.2"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"jetty-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.51-150200.3.19.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"jetty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.1.26-1ubuntu1","6.1.26-1ubuntu1.1","6.1.26-1ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"jetty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.1.26-5","6.1.26-5ubuntu0.1"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"eclipse","product":"jetty"},{"vendor":"eclipse","product":"jetty.project"},{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"e-series_santricity_os_controller"},{"vendor":"netapp","product":"e-series_santricity_unified_manager"},{"vendor":"netapp","product":"e-series_santricity_web_services"}],"references":[{"url":"https://github.com/eclipse/jetty.project/security/advisories/GHSA-p26g-97m4-6q7c","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","web","article","report"]},{"url":"https://github.com/eclipse/jetty.project/pull/9339","tags":["x_refsource_MISC","x_transferred","Patch","fix","web","report"]},{"url":"https://github.com/eclipse/jetty.project/pull/9352","tags":["x_refsource_MISC","x_transferred","Patch","fix","web","report"]},{"url":"https://www.rfc-editor.org/rfc/rfc2965","tags":["x_refsource_MISC","x_transferred","Technical Description","web","report"]},{"url":"https://www.rfc-editor.org/rfc/rfc6265","tags":["x_refsource_MISC","x_transferred","Technical Description","web","report"]},{"url":"https://security.netapp.com/advisory/ntap-20230526-0001/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2023/dsa-5507","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00039.html","tags":["x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"https://github.com/eclipse/jetty.project/security/advisories/GHSA-58qw-p7qm-5rvh","tags":["web"]},{"url":"https://github.com/eclipse/jetty.project/pull/10067","tags":["web"]},{"url":"https://github.com/eclipse/jetty.project/releases/tag/jetty-10.0.16","tags":["web"]},{"url":"https://github.com/eclipse/jetty.project/releases/tag/jetty-11.0.16","tags":["web"]},{"url":"https://github.com/eclipse/jetty.project/releases/tag/jetty-12.0.0","tags":["web"]},{"url":"https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.52.v20230823","tags":["web"]},{"url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-58qw-p7qm-5rvh","tags":["web"]},{"url":"https://github.com/advisories/GHSA-58qw-p7qm-5rvh"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26049","tags":["advisory"]},{"url":"https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.51.v20230217","tags":["web"]},{"url":"https://github.com/advisories/GHSA-p26g-97m4-6q7c"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/26xxx/CVE-2023-26049.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-26049","tags":["advisory"]},{"url":"https://github.com/eclipse/jetty.project","tags":["package"]},{"url":"https://security.netapp.com/advisory/ntap-20230526-0001","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7637","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2023-003","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2184751","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215229","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236340","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236341","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242803","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-25004","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25085","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25086","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25378","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25380","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25419","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25451","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25457","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25541","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25547","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25576","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25594","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25627","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25657","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25685","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25700","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25716","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25726","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25772","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25779","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25803","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25838","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-26041","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7637.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-2976","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-2976","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2976","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4503","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4503","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4503","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5685","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241822","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5685","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5685","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-26048","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-26048","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26048","tags":["advisory"]},{"url":"https://github.com/eclipse/jetty.project/security/advisories/GHSA-qw69-rqj8-6qw8","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-26049","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-26049","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-35887","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-35887","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-35887","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39410","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39410","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39410","tags":["advisory"]},{"url":"https://issues.apache.org/jira/browse/AVRO-3819","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-44487","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-44487","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44487","tags":["advisory"]},{"url":"https://github.com/dotnet/announcements/issues/277","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2023-2102","tags":["advisory"]},{"url":"https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","tags":["article"]},{"url":"https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7638","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7638.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7639","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7639.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0778","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1856376","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1955739","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2066479","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107376","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126789","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170039","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2177632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2177634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180530","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222710","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2227788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232423","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232426","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2260180","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2260182","tags":["report"]},{"url":"https://issues.redhat.com/browse/JKNS-271","tags":["article"]},{"url":"https://issues.redhat.com/browse/JKNS-289","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-10976","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-11158","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-11348","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-1357","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-13652","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-13901","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-14113","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-14393","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-14642","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-15648","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-1709","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-1942","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-2099","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-2184","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-2318","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-27391","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-3692","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-4819","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-4833","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-655","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-6632","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-6982","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-7016","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-7050","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-710","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-8420","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-8497","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPTOOLS-246","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0778.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7692","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7692","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7692","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-26291","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-26291","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-26291","tags":["advisory"]},{"url":"https://maven.apache.org/docs/3.8.1/release-notes.html#cve-2021-26291","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1962","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1962","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1962","tags":["advisory"]},{"url":"https://go.dev/issue/53616","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25857","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25857","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25857","tags":["advisory"]},{"url":"https://bitbucket.org/snakeyaml/snakeyaml/issues/525","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-29599","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-29599","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29599","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42889","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42889","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42889","tags":["advisory"]},{"url":"https://blogs.apache.org/security/entry/cve-2022-42889","tags":["article"]},{"url":"https://lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1om","tags":["article"]},{"url":"https://seclists.org/oss-sec/2022/q4/22","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-20861","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-20861","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-20861","tags":["advisory"]},{"url":"https://spring.io/blog/2023/03/20/spring-framework-6-0-7-and-5-3-26-fix-cve-2023-20860-and-cve-2023-20861","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-20862","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-20862","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-20862","tags":["advisory"]},{"url":"https://spring.io/security/cve-2023-20862","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-24422","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24422","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24422","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-3016","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25761","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25761","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25761","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-3032","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25762","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25762","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25762","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-3019","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-27903","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-27903","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27903","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-3058","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-27904","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-27904","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27904","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-2120","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-37947","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-37947","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37947","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-2999","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40167","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40167","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40167","tags":["advisory"]},{"url":"https://github.com/eclipse/jetty.project/security/advisories/GHSA-hmr7-m48g-48f6","tags":["article"]},{"url":"https://www.rfc-editor.org/rfc/rfc9110#section-8.6","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40337","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40337","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40337","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3105","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40338","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40338","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40338","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3109","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40339","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40339","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40339","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3090","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40341","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40341","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40341","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3116","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23897","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23897","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23897","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/24/6","tags":["article"]},{"url":"https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3314","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23898","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23898","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23898","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3315","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0797","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_satellite/6.14/html/upgrading_and_updating_red_hat_satellite/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232729","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236882","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239010","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239017","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239630","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241933","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2250347","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254974","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257321","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257324","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257331","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257332","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2260525","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2262131","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0797.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-0809","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-0809","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0809","tags":["advisory"]},{"url":"https://github.com/eclipse/mosquitto/commit/6113eac95a9df634fbc858be542c4a0456bfe7b9","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3592","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3592","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3592","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4785","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4785","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4785","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-p25m-jpj4-qcrr","tags":["advisory"]},{"url":"https://github.com/grpc/grpc/pull/33656","tags":["article"]},{"url":"https://github.com/grpc/grpc/pull/33667","tags":["article"]},{"url":"https://github.com/grpc/grpc/pull/33669","tags":["article"]},{"url":"https://github.com/grpc/grpc/pull/33670","tags":["article"]},{"url":"https://github.com/grpc/grpc/pull/33672","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-26141","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-26141","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26141","tags":["advisory"]},{"url":"https://github.com/sidekiq/sidekiq/commit/62c90d7c5a7d8a378d79909859d87c2e0702bf89","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-28366","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-28366","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28366","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-36479","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-36479","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-36479","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38545","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-38545","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38545","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2023-38545.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40175","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40175","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40175","tags":["advisory"]},{"url":"https://github.com/puma/puma/security/advisories/GHSA-68xg-gqqm-vgj8","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0798","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2246070","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248423","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249673","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2251407","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255027","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0798.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6134","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-6134","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6134","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6291","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-6291","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6291","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6484","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-6484","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6484","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-j628-q885-8gr5","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6927","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-6927","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6927","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-44483","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-44483","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44483","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/20/5","tags":["article"]},{"url":"https://lists.apache.org/thread/vmqbp9mfxtrf0kmbnnmbn3h9j6dr9q55","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0799","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0799.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0800","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0800.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232539-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1210620","tags":["report"]},{"url":"https://bugzilla.suse.com/1210621","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-26048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-26049","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-26049","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-26049","title":"Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty","description":"Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a cookie VALUE that starts with `\"` (double quote), it will continue to read the cookie string until it sees a closing quote -- even if a semicolon is encountered. So, a cookie header such as: `DISPLAY_LANGUAGE=\"b; JSESSIONID=1337; c=d\"` will be parsed as one cookie, with the name DISPLAY_LANGUAGE and a value of b; JSESSIONID=1337; c=d instead of 3 separate cookies. This has security implications because if, say, JSESSIONID is an HttpOnly cookie, and the DISPLAY_LANGUAGE cookie value is rendered on the page, an attacker can smuggle the JSESSIONID cookie into the DISPLAY_LANGUAGE cookie and thereby exfiltrate it. This is significant when an intermediary is enacting some policy based on cookies, so a smuggled cookie can bypass that policy yet still be seen by the Jetty server or its logging system. This issue has been addressed in versions 9.4.51, 10.0.14, 11.0.14, and 12.0.0.beta0 and users are advised to upgrade. There are no known workarounds for this issue.","status":"published","published":"2023-04-18T20:35:36.506Z","modified":"2025-02-13T16:44:44.71Z","cvss":[{"version":"3.1","score":2.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:35:15.434947Z"}],"euvd":[{"id":"EUVD-2023-1360","description":"Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a cookie VALUE that starts with `\"` (double quote), it will continue to read the cookie string until it sees a closing quote -- even if a semicolon is encountered. So, a cookie header such as: `DISPLAY_LANGUAGE=\"b; JSESSIONID=1337; c=d\"` will be parsed as one cookie, with the name DISPLAY_LANGUAGE and a value of b; JSESSIONID=1337; c=d instead of 3 separate cookies. This has security implications because if, say, JSESSIONID is an HttpOnly cookie, and the DISPLAY_LANGUAGE cookie value is rendered on the page, an attacker can smuggle the JSESSIONID cookie into the DISPLAY_LANGUAGE cookie and thereby exfiltrate it. This is significant when an intermediary is enacting some policy based on cookies, so a smuggled cookie can bypass that policy yet still be seen by the Jetty server or its logging system. This issue has been addressed in versions 9.4.51, 10.0.14, 11.0.14, and 12.0.0.beta0 and users are advised to upgrade. There are no known workarounds for this issue.","status":"published","published":"2023-04-18T20:35:36Z","modified":"2025-02-13T16:44:44Z","cvss":[{"version":"3.1","score":2.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-03T00:03:50.947767Z"}],"ghsa":[{"id":"GHSA-58qw-p7qm-5rvh","title":"Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations","description":"### From the reporter\n\n\u003e `XmlParser` is vulnerable to XML external entity (XXE) vulnerability.\n\u003e  XmlParser is being used when parsing Jetty’s xml configuration files. An attacker might exploit\n\u003e this vulnerability in order to achieve SSRF or cause a denial of service.\n\u003e One possible scenario is importing a (remote) malicious WAR into a Jetty’s server, while the\n\u003e WAR includes a malicious web.xml.\n\n### Impact\nThere are no circumstances in a normally deployed Jetty server where potentially hostile XML is given to the XmlParser class without the attacker already having arbitrary access to the server. I.e. in order to exploit `XmlParser` the attacker would already have the ability to deploy and execute hostile code.  Specifically, Jetty has no protection against malicious web application and potentially hostile web applications should only be run on an isolated virtualisation.  \n\nThus this is not considered a vulnerability of the Jetty server itself, as any such usage of the jetty XmlParser is equally vulnerable as a direct usage of the JVM supplied SAX parser.  No CVE will be allocated to this advisory.\n\nHowever, any direct usage of the `XmlParser` class by an application may be vulnerable.  The impact would greatly depend on how the application uses `XmlParser`, but it could be a denial of service due to large entity expansion, or possibly the revealing local files if the XML results are accessible remotely.\n\n### Patches\nAbility to configure the SAXParserFactory to fit the needs of your particular XML parser implementation have been merged as part of PR #10067\n\n### Workarounds\nDon't use Jetty's `XmlParser` to parse data from users.","status":"published","published":"2023-07-10T21:52:39Z","modified":"2026-02-10T20:06:18Z","cvss":[{"version":"3.1","score":3.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L","level":"low"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T14:39:24.742346Z"},{"id":"GHSA-p26g-97m4-6q7c","title":"Eclipse Jetty's cookie parsing of quoted values can exfiltrate values from other cookies","description":"Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism.\n\nIf Jetty sees a cookie VALUE that starts with `\"` (double quote), it will continue to read the cookie string until it sees a closing quote -- even if a semicolon is encountered.\n\nSo, a cookie header such as:\n\n`DISPLAY_LANGUAGE=\"b; JSESSIONID=1337; c=d\"` will be parsed as one cookie, with the name `DISPLAY_LANGUAGE` and a value of `b; JSESSIONID=1337; c=d`\n\ninstead of 3 separate cookies.\n\n### Impact\nThis has security implications because if, say, `JSESSIONID` is an `HttpOnly` cookie, and the `DISPLAY_LANGUAGE` cookie value is rendered on the page, an attacker can smuggle the `JSESSIONID` cookie into the `DISPLAY_LANGUAGE` cookie and thereby exfiltrate it. This is significant when an intermediary is enacting some policy based on cookies, so a smuggled cookie can bypass that policy yet still be seen by the Jetty server.\n\n### Patches\n* 9.4.51.v20230217 - via PR #9352\n* 10.0.15 - via PR #9339\n* 11.0.15 - via PR #9339\n\n### Workarounds\nNo workarounds\n\n### References\n* https://www.rfc-editor.org/rfc/rfc2965\n* https://www.rfc-editor.org/rfc/rfc6265\n","status":"published","published":"2023-04-18T22:19:57Z","modified":"2023-11-06T05:01:53Z","cvss":[{"version":"3.1","score":2.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:37:14.234712Z"}],"nvd":[{"id":"CVE-2023-26049","description":"Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a cookie VALUE that starts with `\"` (double quote), it will continue to read the cookie string until it sees a closing quote -- even if a semicolon is encountered. So, a cookie header such as: `DISPLAY_LANGUAGE=\"b; JSESSIONID=1337; c=d\"` will be parsed as one cookie, with the name DISPLAY_LANGUAGE and a value of b; JSESSIONID=1337; c=d instead of 3 separate cookies. This has security implications because if, say, JSESSIONID is an HttpOnly cookie, and the DISPLAY_LANGUAGE cookie value is rendered on the page, an attacker can smuggle the JSESSIONID cookie into the DISPLAY_LANGUAGE cookie and thereby exfiltrate it. This is significant when an intermediary is enacting some policy based on cookies, so a smuggled cookie can bypass that policy yet still be seen by the Jetty server or its logging system. This issue has been addressed in versions 9.4.51, 10.0.14, 11.0.14, and 12.0.0.beta0 and users are advised to upgrade. There are no known workarounds for this issue.","status":"published","published":"2023-04-18T21:15:09.043Z","modified":"2026-06-17T05:42:32.887Z","cvss":[{"version":"3.1","score":2.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:07:56.683259Z"}],"osv":[{"id":"CVE-2023-26049","title":"Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty","description":"Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a cookie VALUE that starts with `\"` (double quote), it will continue to read the cookie string until it sees a closing quote -- even if a semicolon is encountered. So, a cookie header such as: `DISPLAY_LANGUAGE=\"b; JSESSIONID=1337; c=d\"` will be parsed as one cookie, with the name DISPLAY_LANGUAGE and a value of b; JSESSIONID=1337; c=d instead of 3 separate cookies. This has security implications because if, say, JSESSIONID is an HttpOnly cookie, and the DISPLAY_LANGUAGE cookie value is rendered on the page, an attacker can smuggle the JSESSIONID cookie into the DISPLAY_LANGUAGE cookie and thereby exfiltrate it. This is significant when an intermediary is enacting some policy based on cookies, so a smuggled cookie can bypass that policy yet still be seen by the Jetty server or its logging system. This issue has been addressed in versions 9.4.51, 10.0.14, 11.0.14, and 12.0.0.beta0 and users are advised to upgrade. There are no known workarounds for this issue.","status":"published","published":"2023-04-18T20:35:36.506Z","modified":"2026-10-28T02:30:53.734720584Z","cvss":[{"version":"3.1","score":2.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:44:31.135751Z"},{"id":"DEBIAN-CVE-2023-26049","description":"Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a cookie VALUE that starts with `\"` (double quote), it will continue to read the cookie string until it sees a closing quote -- even if a semicolon is encountered. So, a cookie header such as: `DISPLAY_LANGUAGE=\"b; JSESSIONID=1337; c=d\"` will be parsed as one cookie, with the name DISPLAY_LANGUAGE and a value of b; JSESSIONID=1337; c=d instead of 3 separate cookies. This has security implications because if, say, JSESSIONID is an HttpOnly cookie, and the DISPLAY_LANGUAGE cookie value is rendered on the page, an attacker can smuggle the JSESSIONID cookie into the DISPLAY_LANGUAGE cookie and thereby exfiltrate it. This is significant when an intermediary is enacting some policy based on cookies, so a smuggled cookie can bypass that policy yet still be seen by the Jetty server or its logging system. This issue has been addressed in versions 9.4.51, 10.0.14, 11.0.14, and 12.0.0.beta0 and users are advised to upgrade. There are no known workarounds for this issue.","status":"published","published":"2023-04-18T21:15:09.043Z","modified":"2026-10-26T18:02:11.341215802Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:39.369204Z"},{"id":"GHSA-58qw-p7qm-5rvh","title":"Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations","description":"### From the reporter\n\n\u003e `XmlParser` is vulnerable to XML external entity (XXE) vulnerability.\n\u003e  XmlParser is being used when parsing Jetty’s xml configuration files. An attacker might exploit\n\u003e this vulnerability in order to achieve SSRF or cause a denial of service.\n\u003e One possible scenario is importing a (remote) malicious WAR into a Jetty’s server, while the\n\u003e WAR includes a malicious web.xml.\n\n### Impact\nThere are no circumstances in a normally deployed Jetty server where potentially hostile XML is given to the XmlParser class without the attacker already having arbitrary access to the server. I.e. in order to exploit `XmlParser` the attacker would already have the ability to deploy and execute hostile code.  Specifically, Jetty has no protection against malicious web application and potentially hostile web applications should only be run on an isolated virtualisation.  \n\nThus this is not considered a vulnerability of the Jetty server itself, as any such usage of the jetty XmlParser is equally vulnerable as a direct usage of the JVM supplied SAX parser.  No CVE will be allocated to this advisory.\n\nHowever, any direct usage of the `XmlParser` class by an application may be vulnerable.  The impact would greatly depend on how the application uses `XmlParser`, but it could be a denial of service due to large entity expansion, or possibly the revealing local files if the XML results are accessible remotely.\n\n### Patches\nAbility to configure the SAXParserFactory to fit the needs of your particular XML parser implementation have been merged as part of PR #10067\n\n### Workarounds\nDon't use Jetty's `XmlParser` to parse data from users.","status":"published","published":"2023-07-10T21:52:39Z","modified":"2026-09-10T03:50:08.640067019Z","cvss":[{"version":"3.1","score":3.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L","level":"low"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T15:46:38.213481Z"},{"id":"GHSA-p26g-97m4-6q7c","title":"Eclipse Jetty's cookie parsing of quoted values can exfiltrate values from other cookies","description":"Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism.\n\nIf Jetty sees a cookie VALUE that starts with `\"` (double quote), it will continue to read the cookie string until it sees a closing quote -- even if a semicolon is encountered.\n\nSo, a cookie header such as:\n\n`DISPLAY_LANGUAGE=\"b; JSESSIONID=1337; c=d\"` will be parsed as one cookie, with the name `DISPLAY_LANGUAGE` and a value of `b; JSESSIONID=1337; c=d`\n\ninstead of 3 separate cookies.\n\n### Impact\nThis has security implications because if, say, `JSESSIONID` is an `HttpOnly` cookie, and the `DISPLAY_LANGUAGE` cookie value is rendered on the page, an attacker can smuggle the `JSESSIONID` cookie into the `DISPLAY_LANGUAGE` cookie and thereby exfiltrate it. This is significant when an intermediary is enacting some policy based on cookies, so a smuggled cookie can bypass that policy yet still be seen by the Jetty server.\n\n### Patches\n* 9.4.51.v20230217 - via PR #9352\n* 10.0.15 - via PR #9339\n* 11.0.15 - via PR #9339\n\n### Workarounds\nNo workarounds\n\n### References\n* https://www.rfc-editor.org/rfc/rfc2965\n* https://www.rfc-editor.org/rfc/rfc6265\n","status":"published","published":"2023-04-18T22:19:57Z","modified":"2026-09-10T03:50:01.307364519Z","cvss":[{"version":"3.1","score":2.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:46:52.534897Z"},{"id":"RHSA-2023:7637","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.14 on RHEL 7 security update","status":"published","published":"2024-09-30T15:48:00Z","modified":"2026-10-15T10:06:19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2023:7638","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.14 on RHEL 8 security update","status":"published","published":"2024-09-30T15:47:51Z","modified":"2026-10-15T10:06:19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2023:7639","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.14 on RHEL 9 security update","status":"published","published":"2024-09-30T15:47:40Z","modified":"2026-10-15T10:06:20Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0778","title":"Red Hat Security Advisory: Jenkins and Jenkins-2-plugins security update","status":"published","published":"2024-09-30T15:05:06Z","modified":"2026-10-13T10:06:12Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0797","title":"Red Hat Security Advisory: Satellite 6.14.2 Async Security Update","status":"published","published":"2024-09-30T07:12:50Z","modified":"2026-10-15T10:06:58Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0798","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.7 security update on RHEL 7","status":"published","published":"2024-09-30T10:15:54Z","modified":"2026-10-13T10:06:13Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0799","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.7 security update on RHEL 8","status":"published","published":"2024-09-30T10:16:03Z","modified":"2026-10-13T10:06:14Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0800","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.7 security update on RHEL 9","status":"published","published":"2024-09-30T10:16:32Z","modified":"2026-10-13T10:06:15Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"UBUNTU-CVE-2023-26049","description":"Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a cookie VALUE that starts with `\"` (double quote), it will continue to read the cookie string until it sees a closing quote -- even if a semicolon is encountered. So, a cookie header such as: `DISPLAY_LANGUAGE=\"b; JSESSIONID=1337; c=d\"` will be parsed as one cookie, with the name DISPLAY_LANGUAGE and a value of b; JSESSIONID=1337; c=d instead of 3 separate cookies. This has security implications because if, say, JSESSIONID is an HttpOnly cookie, and the DISPLAY_LANGUAGE cookie value is rendered on the page, an attacker can smuggle the JSESSIONID cookie into the DISPLAY_LANGUAGE cookie and thereby exfiltrate it. This is significant when an intermediary is enacting some policy based on cookies, so a smuggled cookie can bypass that policy yet still be seen by the Jetty server or its logging system. This issue has been addressed in versions 9.4.51, 10.0.14, 11.0.14, and 12.0.0.beta0 and users are advised to upgrade. There are no known workarounds for this issue.","status":"published","published":"2023-04-18T21:15:00Z","modified":"2025-10-24T05:01:50Z","cvss":[{"version":"3.1","score":2.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N","level":"low"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:54:20.198616Z"},{"id":"CLSA-2026-1775003156","title":"TuxCare security update for org.eclipse.jetty (6 CVEs)","description":"TuxCare rebuilt 2 org.eclipse.jetty packages to address 6 CVEs. Fixed in 8.2.0.v20160908-tuxcare.2.","status":"published","published":"2026-08-04T14:52:17Z","modified":"2026-11-02T19:45:18.331004014Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1778546718","title":"TuxCare security update for 7 packages (14 CVEs)","description":"TuxCare rebuilt 7 packages to address 14 CVEs. Fixed in 9.4.50.v20221201-tuxcare.1.","status":"published","published":"2026-08-04T14:52:31Z","modified":"2026-11-02T19:45:28.96509752Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1779065189","title":"TuxCare security update for org.eclipse.jetty (5 CVEs)","description":"TuxCare rebuilt 4 org.eclipse.jetty packages to address 5 CVEs. Fixed in 9.4.41.v20210516-tuxcare.1.","status":"published","published":"2026-08-04T14:52:32Z","modified":"2026-11-10T19:58:30.400605499Z","updated_at":"2026-11-10T20:07:15.512362Z"},{"id":"CLSA-2026-1779151632","title":"TuxCare security update for 2 packages (5 CVEs)","description":"TuxCare rebuilt 2 packages to address 5 CVEs. Fixed in 9.4.24.v20191120-tuxcare.2.","status":"published","published":"2026-08-04T14:52:32Z","modified":"2026-11-02T19:45:31.378618085Z","updated_at":"2026-11-02T20:30:18.404297Z"},{"id":"CLSA-2026-1779842950","title":"TuxCare security update for 5 packages (5 CVEs)","description":"TuxCare rebuilt 5 packages to address 5 CVEs. Fixed in 9.4.48.v20220622-tuxcare.2.","status":"published","published":"2026-08-04T14:52:34Z","modified":"2026-11-02T19:45:31.791639216Z","updated_at":"2026-11-02T20:30:18.404297Z"},{"id":"CLSA-2026-1787550865","title":"TuxCare security update for org.eclipse.jetty:jetty-server (1 CVE)","description":"TuxCare rebuilt org.eclipse.jetty:jetty-server to address 1 CVE. Fixed in 7.6.0.v20120127-tuxcare.3.","status":"published","published":"2026-08-24T05:54:25Z","modified":"2026-11-02T19:45:57.960475117Z","updated_at":"2026-11-02T20:29:49.757752Z"},{"id":"CLSA-2026-1794182179","title":"TuxCare security update for 3 packages (3 CVEs)","description":"TuxCare rebuilt 3 packages to address 3 CVEs. Fixed in 10.0.26-tuxcare.4.","status":"published","published":"2026-11-09T00:56:20Z","modified":"2026-11-09T07:15:05.131895149Z","updated_at":"2026-11-09T07:20:29.20536Z"},{"id":"DLA-3592-1","title":"jetty9 - security update","status":"published","published":"2023-09-30T00:00:00Z","modified":"2026-03-09T01:20:17.24853Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5507-1","title":"jetty9 - security update","status":"published","published":"2023-09-28T00:00:00Z","modified":"2026-03-09T02:10:45.628448Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"openSUSE-SU-2024:12949-1","title":"jetty-annotations-9.4.51-1.1 on GA media","description":"These are all security issues fixed in the jetty-annotations-9.4.51-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:42:43.143971Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"SUSE-SU-2023:2539-1","title":"Security update for jetty-minimal","description":"This update for jetty-minimal fixes the following issues:\n\nUpdated to version 9.4.51.v20230217:\n- CVE-2023-26048: Fixed an excessive memory consumption when\n  processing a large multipart request (bsc#1210620)\n- CVE-2023-26049: Fixed a cookie exfiltration issue due to improper\n  parsing (bsc#1210621).\n","status":"published","published":"2023-06-19T07:57:32Z","modified":"2026-02-04T03:56:06.894741Z","updated_at":"2026-11-02T15:53:53.019382Z"}]}}