org.eclipse.jetty:jetty-http vulnerabilities (Maven)

5 vulnerabilities.

• org.eclipse.jetty:jetty-http Maven HTTP Request Smuggling via Chunked Extension Quoted-String Parsing CVE-2026-2332 Public exploitFix available 7.4 HighApril 14, 2026
• org.eclipse.jetty:jetty-http Maven Jetty URI parsing of invalid authority CVE-2024-6763 Fix available 3.7 LowOctober 14, 2024
• org.eclipse.jetty:jetty-http Maven Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2025-11143 Fix available 3.7 LowJuly 10, 2023
• org.eclipse.jetty:jetty-http Maven Jetty accepts "+" prefixed value in Content-Length CVE-2023-40167 Public exploitFix available 5.3 MediumJuly 10, 2023
• org.eclipse.jetty:jetty-http Maven Jetty invalid URI parsing may produce invalid HttpURI.authority CVE-2022-2047 Fix available 2.7 LowJuly 7, 2022