org.eclipse.jetty:jetty-server vulnerabilities
CVEs whose affected-version data names the org.eclipse.jetty:jetty-server package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-6790Medium· 5.3Eclipse Jetty: HTTP Authority/Host mismatch
Eclipse Jetty: HTTP Authority/Host mismatch
▾ Sunliteclipse · org.eclipse.jetty:jetty-serverEPSS 0.31%via GHSA
CVE-2024-7708High· 7.5Eclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requests
Eclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requests
▾ Twilighteclipse · org.eclipse.jetty:jetty-serverEPSS 0.44%via GHSA