{"id":"CVE-2026-19203","aliases":["CLSA-2026-1787795581","CLSA-2026-1787893054","CLSA-2026-1789219285","DEBIAN-CVE-2026-19203","EUVD-2026-72718","GHSA-p2j5-5566-vpv9","GHSA-xc35-c22g-239h","UBUNTU-CVE-2026-19203"],"status":"published","title":"A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty...","description":"A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request boundaries, potentially resulting in HTTP request smuggling.\n\n\n\n\nThis is caused by Jetty accepting a lone LF character as a terminator in parts of chunked request parsing. Depending on the Jetty version and configured HTTP compliance mode, this may occur in chunk extensions, chunk data termination, or trailer termination.","severity":{"version":"4.0","score":8.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00306,"percentile":0.23631,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-444"],"published":"2026-08-27T01:53:01Z","modified":"2026-11-04T06:00:07Z","fixes":[{"ecosystem":"Debian:14","package":"jetty12","fixed_in":["12.0.39-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.aggregate:jetty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.fcgi:fcgi-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.fcgi:fcgi-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.fcgi:fcgi-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.gcloud:gcloud-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.gcloud:jetty-gcloud-session-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.http2:http2-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.http2:http2-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.http2:http2-hpack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.http2:http2-http-client-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.http2:http2-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.http2:http2-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.memcached:jetty-memcached-sessions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.memcached:memcached-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.osgi:jetty-httpservice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.osgi:jetty-osgi-alpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.osgi:jetty-osgi-boot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.osgi:jetty-osgi-boot-jsp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.osgi:jetty-osgi-boot-warurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.osgi:jetty-osgi-project","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.osgi:test-jetty-osgi-webapp-resources","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.websocket:javax-websocket-client-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.websocket:javax-websocket-server-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.websocket:jetty-websocket-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.websocket:websocket-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.websocket:websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.websocket:websocket-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.websocket:websocket-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.websocket:websocket-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.websocket:websocket-servlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:apache-jsp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:apache-jstl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:infinispan-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:infinispan-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:infinispan-embedded-query","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:infinispan-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:infinispan-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:infinispan-remote-query","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-alpn-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-alpn-conscrypt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-alpn-conscrypt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-alpn-java-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-alpn-java-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-alpn-openjdk8-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-alpn-openjdk8-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-alpn-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-alpn-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-cdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-continuation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-deploy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-distribution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-hazelcast","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-home","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-http-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-jaas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-jaspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-jmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-jndi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-jspc-maven-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-maven-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-nosql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-openid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-plus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-project","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-quickstart","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-rewrite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-runner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-servlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-servlets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-start","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-unixsocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-util-ajax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.64"},{"fixed":"9.4.64.tuxcare0001"}]}],"versions":["9.4.64"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.demos:demo-async-rest-jar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.demos:demo-async-rest-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.demos:demo-async-rest-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.demos:demo-async-rest-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.demos:demo-container-initializer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.demos:demo-jaas-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.demos:demo-jetty-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.demos:demo-jndi-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.demos:demo-jsp-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.demos:demo-mock-resources","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.demos:demo-proxy-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.demos:demo-simple-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.demos:demo-spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.demos:demo-spec-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.demos:demo-web-fragment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.demos:demos-jetty-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.demos:demos-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.documentation:code-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.documentation:documentation-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.documentation:jetty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.fcgi:fcgi-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.fcgi:fcgi-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.fcgi:fcgi-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.gcloud:gcloud-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.gcloud:jetty-gcloud-session-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.http2:http2-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.http2:http2-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.http2:http2-hpack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.http2:http2-http-client-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.http2:http2-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.http2:http2-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.http3:http3-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.http3:http3-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.http3:http3-http-client-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.http3:http3-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.http3:http3-qpack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.http3:http3-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.memcached:jetty-memcached-sessions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.memcached:memcached-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.osgi:jetty-httpservice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.osgi:jetty-osgi-alpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.osgi:jetty-osgi-boot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.osgi:jetty-osgi-boot-jsp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.osgi:jetty-osgi-boot-warurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.osgi:jetty-osgi-project","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.osgi:test-jetty-osgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.quic:quic-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.quic:quic-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.quic:quic-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.quic:quic-quiche","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.quic:quic-quiche-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.quic:quic-quiche-foreign-incubator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.quic:quic-quiche-jna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.quic:quic-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.websocket:websocket-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.websocket:websocket-core-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.websocket:websocket-core-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.websocket:websocket-javax-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.websocket:websocket-javax-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.websocket:websocket-javax-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.websocket:websocket-jetty-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.websocket:websocket-jetty-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.websocket:websocket-jetty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.websocket:websocket-jetty-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.websocket:websocket-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty.websocket:websocket-servlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:apache-jsp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:apache-jstl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:infinispan-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:infinispan-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:infinispan-embedded-query","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:infinispan-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:infinispan-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:infinispan-remote-query","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-alpn-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-alpn-conscrypt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-alpn-conscrypt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-alpn-java-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-alpn-java-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-alpn-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-alpn-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-cdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-deploy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-hazelcast","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-home","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-http-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-jaas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-jaspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-jmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-jndi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-jspc-maven-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-keystore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-maven-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-nosql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-openid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-p2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-plus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-project","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-quickstart","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-rewrite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-runner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-servlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-servlets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-slf4j-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.eclipse.jetty:jetty-start","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.32"},{"fixed":"10.0.32.tuxcare0001"}]}],"versions":["10.0.32"],"bundled":3},{"source":"osv","ecosystem":"Debian:13","package":"jetty12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["12.0.17-3","12.0.17-3.1","12.0.17-3.1~deb13u1","12.0.32-1","12.0.32-2","12.0.33-1","12.0.39-1","12.0.40-1","12.0.40-2"]},{"source":"osv","ecosystem":"Debian:14","package":"jetty12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.39-1"}]}],"versions":["12.0.17-3","12.0.17-3.1","12.0.17-3.1~deb13u1","12.0.32-1","12.0.32-2","12.0.33-1"]},{"source":"osv","ecosystem":"Debian:12","package":"jetty9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.4.50-4","9.4.50-4+deb12u1","9.4.50-4+deb12u2","9.4.50-4+deb12u3","9.4.51-1","9.4.51-2","9.4.52-1","9.4.53-1","9.4.54-1","9.4.55-1","9.4.56-1","9.4.57-0+deb12u1","9.4.57-1","9.4.57-1.1","9.4.57-1.1~deb12u1","9.4.57-1.1~deb13u1","9.4.58-1","9.4.58-2"]},{"source":"osv","ecosystem":"Debian:13","package":"jetty9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.4.57-1","9.4.57-1.1","9.4.57-1.1~deb12u1","9.4.57-1.1~deb13u1","9.4.58-1","9.4.58-2"]},{"source":"osv","ecosystem":"Debian:14","package":"jetty9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.4.57-1","9.4.57-1.1","9.4.57-1.1~deb12u1","9.4.57-1.1~deb13u1","9.4.58-1","9.4.58-2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"jetty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.1.26-1ubuntu1","6.1.26-1ubuntu1.1","6.1.26-1ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"jetty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.1.26-5","6.1.26-5ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"jetty9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.2.14-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"jetty9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.2.22-2","9.2.22-3","9.2.23-1","9.4.15-1~18.04.1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"jetty9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.4.18-2build2","9.4.26-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"jetty9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.4.39-3","9.4.44-2","9.4.44-3","9.4.44-4","9.4.45-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"jetty9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.4.51-2","9.4.53-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"jetty12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["12.0.32-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"jetty9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.4.58-1","9.4.58-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"jetty12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["12.0.17-3.1","12.0.32-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"jetty9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.4.57-1","9.4.57-1.1","9.4.58-1"]}],"affected_more":132,"products":[{"vendor":"eclipse foundation","product":"eclipse jetty"}],"references":[{"url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-xc35-c22g-239h","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19203","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-p2j5-5566-vpv9"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19203.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-19203","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-19203","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-19203","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-19203","description":"A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request boundaries, potentially resulting in HTTP request smuggling.\n\n\n\n\nThis is caused by Jetty accepting a lone LF character as a terminator in parts of chunked request parsing. Depending on the Jetty version and configured HTTP compliance mode, this may occur in chunk extensions, chunk data termination, or trailer termination.","status":"published","published":"2026-09-08T12:08:37.576Z","modified":"2026-09-08T14:21:55.816Z","cvss":[{"version":"4.0","score":8.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna"}],"cwes":["CWE-444"],"updated_at":"2026-11-02T13:47:28.691429Z"}],"euvd":[{"id":"EUVD-2026-72718","description":"A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request boundaries, potentially resulting in HTTP request smuggling.\n\n\n\n\nThis is caused by Jetty accepting a lone LF character as a terminator in parts of chunked request parsing. Depending on the Jetty version and configured HTTP compliance mode, this may occur in chunk extensions, chunk data termination, or trailer termination.","status":"published","published":"2026-09-08T12:08:37Z","modified":"2026-09-08T14:21:55Z","cvss":[{"version":"4.0","score":8.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T17:28:29.426Z"}],"ghsa":[{"id":"GHSA-p2j5-5566-vpv9","title":"A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty...","description":"A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request boundaries, potentially resulting in HTTP request smuggling.\n\n\n\n\nThis is caused by Jetty accepting a lone LF character as a terminator in parts of chunked request parsing. Depending on the Jetty version and configured HTTP compliance mode, this may occur in chunk extensions, chunk data termination, or trailer termination.","status":"published","published":"2026-09-08T15:31:53Z","modified":"2026-09-08T15:31:58Z","cvss":[{"version":"4.0","score":8.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"cwes":["CWE-444"],"updated_at":"2026-11-02T15:11:28.397774Z"}],"nvd":[{"id":"CVE-2026-19203","description":"A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request boundaries, potentially resulting in HTTP request smuggling.\n\n\n\n\nThis is caused by Jetty accepting a lone LF character as a terminator in parts of chunked request parsing. Depending on the Jetty version and configured HTTP compliance mode, this may occur in chunk extensions, chunk data termination, or trailer termination.","status":"published","published":"2026-09-08T13:17:18.52Z","modified":"2026-09-08T15:18:42.667Z","cvss":[{"version":"4.0","score":8.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"}],"cwes":["CWE-444"],"updated_at":"2026-11-02T14:12:44.436435Z"}],"osv":[{"id":"CVE-2026-19203","description":"A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request boundaries, potentially resulting in HTTP request smuggling.\n\n\n\n\nThis is caused by Jetty accepting a lone LF character as a terminator in parts of chunked request parsing. Depending on the Jetty version and configured HTTP compliance mode, this may occur in chunk extensions, chunk data termination, or trailer termination.","status":"published","published":"2026-09-08T12:08:37.576Z","modified":"2026-10-28T02:31:08.735483639Z","cvss":[{"version":"4.0","score":8.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-444"],"updated_at":"2026-11-02T15:44:58.024074Z"},{"id":"DEBIAN-CVE-2026-19203","description":"A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request boundaries, potentially resulting in HTTP request smuggling.     This is caused by Jetty accepting a lone LF character as a terminator in parts of chunked request parsing. Depending on the Jetty version and configured HTTP compliance mode, this may occur in chunk extensions, chunk data termination, or trailer termination.","status":"published","published":"2026-09-08T13:17:18.52Z","modified":"2026-11-04T06:00:07.608503227Z","cvss":[{"version":"4.0","score":8.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-04T06:29:21.687524Z"},{"id":"UBUNTU-CVE-2026-19203","description":"A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request boundaries, potentially resulting in HTTP request smuggling. This is caused by Jetty accepting a lone LF character as a terminator in parts of chunked request parsing. Depending on the Jetty version and configured HTTP compliance mode, this may occur in chunk extensions, chunk data termination, or trailer termination.","status":"published","published":"2026-09-08T13:17:00Z","modified":"2026-10-17T12:59:54.135349171Z","cvss":[{"version":"4.0","score":8.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T16:56:01.334185Z"},{"id":"CLSA-2026-1787795581","title":"TuxCare security update for 86 packages (2 CVEs)","description":"TuxCare rebuilt 86 packages to address 2 CVEs. Fixed in 9.4.64.tuxcare0001.","status":"published","published":"2026-08-27T01:53:01Z","modified":"2026-10-15T09:47:26.237905915Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1787893054","title":"TuxCare security update for 123 packages (3 CVEs)","description":"TuxCare rebuilt 123 packages to address 3 CVEs. Fixed in 10.0.32.tuxcare0001.","status":"published","published":"2026-08-28T04:57:34Z","modified":"2026-10-15T09:47:26.377342192Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1789219285","title":"TuxCare security update for 123 packages (4 CVEs)","description":"TuxCare rebuilt 123 packages to address 4 CVEs. Fixed in 11.0.32.tuxcare0001.","status":"published","published":"2026-09-12T13:21:25Z","modified":"2026-10-15T09:47:43.90803982Z","updated_at":"2026-11-02T15:43:47.938828Z"}]}}