org.eclipse.jetty.ee9:jetty-ee9-annotations vulnerabilities

CVEs whose affected-version data names the org.eclipse.jetty.ee9:jetty-ee9-annotations package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-18661High· 8.8

today

In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`, the Jakarta Spec authoritative url-pattern rules for mixed `@ServletSecurity` annotation, and `web.xml` defined `security-constraint` on the s…

In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`, the Jakarta Spec authoritative url-pattern rules for mixed `@ServletSecurity` annotation, and `web.xml` defined `security-constraint` on the s…

▾ TwilightEclipse Foundation · org.eclipse.jetty.ee11:jetty-ee11-annotationsvia NVD