jetty-websocket vulnerabilities (openSUSE)

8 vulnerabilities.

• jetty-websocket openSUSE MadeYouReset HTTP/2 vulnerability CVE-2025-5115 Fix available 7.7 HighJuly 10, 2023
• jetty-websocket openSUSE Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2025-11143 Fix available 3.7 LowJuly 10, 2023
• jetty-websocket openSUSE Encoded URIs can access WEB-INF directory in Eclipse Jetty CVE-2021-34429 Public exploitFix available EPSS 99.3% 5.3 MediumJuly 15, 2021
• jetty-websocket openSUSE Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2021-28169 Fix available EPSS 78.5% 5.3 MediumJune 9, 2021
• jetty-websocket openSUSE Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources CVE-2021-28165 Public exploitFix available EPSS 53.9% 7.5 HighApril 1, 2021
• jetty-websocket openSUSE Authorization Before Parsing and Canonicalization in jetty CVE-2021-28164 Public exploitFix available EPSS 82.4% 5.3 MediumApril 1, 2021
• jetty-websocket openSUSE Directory exposure in jetty CVE-2021-28163 Fix available 2.7 LowApril 1, 2021
• jetty-websocket openSUSE Buffer not correctly recycled in Gzip Request inflation CVE-2020-27218 Fix available 4.8 MediumNovember 28, 2020