org.eclipse.jetty.http3:http3-qpack vulnerabilities (TuxCare)
13 vulnerabilities.
org.eclipse.jetty.http3:http3-qpackTuxCareTuxCare security update for 123 packages (1 CVE)No scoreorg.eclipse.jetty.http3:http3-qpackTuxCareWhen Jetty's `HttpClient` make a request to a server through a forward proxy, the server may...8.2 Highorg.eclipse.jetty.http3:http3-qpackTuxCareIn Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ```...8.2 Highorg.eclipse.jetty.http3:http3-qpackTuxCareIn Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to...6.9 Mediumorg.eclipse.jetty.http3:http3-qpackTuxCareTuxCare security update for 123 packages (8 CVEs)5.6 Mediumorg.eclipse.jetty.http3:http3-qpackTuxCareTuxCare security update for 123 packages (8 CVEs)6.9 Mediumorg.eclipse.jetty.http3:http3-qpackTuxCareIn Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`,...8.8 Highorg.eclipse.jetty.http3:http3-qpackTuxCareJetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames8.8 Highorg.eclipse.jetty.http3:http3-qpackTuxCareUnauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substring6.9 Mediumorg.eclipse.jetty.http3:http3-qpackTuxCareA client may send a WebSocket frame with an unknown opcode and a very large declared payload...8.7 Highorg.eclipse.jetty.http3:http3-qpackTuxCareA client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty...8.3 Highorg.eclipse.jetty.http3:http3-qpackTuxCareA client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are...8.7 Highorg.eclipse.jetty.http3:http3-qpackTuxCareDigest authentication lossy encoding8.7 High