org.eclipse.jetty.http2:http2-server vulnerabilities (Maven)

2 vulnerabilities.

• org.eclipse.jetty.http2:http2-server Maven Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023
• org.eclipse.jetty.http2:http2-server Maven Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2022-2048 Fix available 7.5 HighJuly 7, 2022