org.eclipse.jetty:jetty-ethereum vulnerabilities

CVEs whose affected-version data names the org.eclipse.jetty:jetty-ethereum package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-19863Critical· 9.3

today

An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configured login path. This is caused by the authenticator using an unanchored substring match when ide…

An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configured login path. This is caused by the authenticator using an unanchored substring match when ide…

▾ MidnightEclipse Foundation · org.eclipse.jetty:jetty-ethereumvia NVD