Eclipse Jetty vulnerabilities
52 published vulnerabilities in Eclipse Jetty, 1 of them exploited in the wild. The most were published in 2023 (7), and 7 so far in 2026.
Eclipse Jetty vulnerabilities by year
2009
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Eclipse Jetty vulnerabilities
- CVE-2023-44487 HTTP/2 Rapid Reset Attack
- CVE-2017-7657 Critical severity vulnerability that affects org.eclipse.jetty:jetty-server
- CVE-2017-7658 Jetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling)
- CVE-2016-4800 Jetty contains an alias issue that could allow unauthenticated remote code execution due to specially crafted request
- CVE-2019-17638 Operation on a Resource after Expiration or Release in Jetty Server
- CVE-2018-12538 Access and integrity issue within Eclipse Jetty
- CVE-2026-10050 Digest authentication lossy encoding
- CVE-2025-5115 MadeYouReset HTTP/2 vulnerability
- CVE-2024-7708 Eclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requests
- CVE-2026-1605 The Eclipse Jetty Server Artifact has a Gzip request memory leak
- CVE-2025-1948 Eclipse Jetty HTTP clients can increase memory allocation
- CVE-2024-22201 Jetty connection leaking on idle timeout when TCP congested
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.