org.eclipse.jetty:jetty-server vulnerabilities
CVEs whose affected-version data names the org.eclipse.jetty:jetty-server package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-18660High· 8.8PoCIn Eclipse Jetty, across various versions of `jetty-server`, and `jetty-proxy`, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case.
In Eclipse Jetty, across various versions of `jetty-server`, and `jetty-proxy`, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case.
▾ MidnightEclipse Foundation · org.eclipse.jetty:jetty-serverEPSS 0.32%via NVD
CVE-2026-76182Medium· 6.9PoCIn Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the request path in context. However, URI paths may contain characters that are …
In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the request path in context. However, URI paths may contain characters that are …
▾ TwilightEclipse Foundation · org.eclipse.jetty.ee10:jetty-ee10-fcgi-proxyEPSS 0.34%via NVD
CVE-2026-6790Medium· 5.3Eclipse Jetty: HTTP Authority/Host mismatch
Eclipse Jetty: HTTP Authority/Host mismatch
▾ Sunliteclipse · org.eclipse.jetty:jetty-serverEPSS 0.31%via GHSA