# Eclipse Jetty


- [CVE-2023-44487](https://insights.sbomify.com/CVE-2023-44487/): HTTP/2 Rapid Reset Attack (high 7.5, exploited in the wild)
- [CVE-2017-7657](https://insights.sbomify.com/CVE-2017-7657/): Critical severity vulnerability that affects org.eclipse.jetty:jetty-server (critical 9.8)
- [CVE-2017-7658](https://insights.sbomify.com/CVE-2017-7658/): Jetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling) (critical 9.8)
- [CVE-2016-4800](https://insights.sbomify.com/CVE-2016-4800/): Jetty contains an alias issue that could allow unauthenticated remote code execution due to specially crafted request (critical 9.8)
- [CVE-2019-17638](https://insights.sbomify.com/CVE-2019-17638/): Operation on a Resource after Expiration or Release in Jetty Server (critical 9.4)
- [CVE-2018-12538](https://insights.sbomify.com/CVE-2018-12538/): Access and integrity issue within Eclipse Jetty (high 8.8)
- [CVE-2026-10050](https://insights.sbomify.com/CVE-2026-10050/): Digest authentication lossy encoding (high 8.7)
- [CVE-2025-5115](https://insights.sbomify.com/CVE-2025-5115/): MadeYouReset HTTP/2 vulnerability (high 7.7)
- [CVE-2024-7708](https://insights.sbomify.com/CVE-2024-7708/): Eclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requests (high 7.5)
- [CVE-2026-1605](https://insights.sbomify.com/CVE-2026-1605/): The Eclipse Jetty Server Artifact has a Gzip request memory leak (high 7.5)
- [CVE-2025-1948](https://insights.sbomify.com/CVE-2025-1948/): Eclipse Jetty HTTP clients can increase memory allocation (high 7.5)
- [CVE-2024-22201](https://insights.sbomify.com/CVE-2024-22201/): Jetty connection leaking on idle timeout when TCP congested (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/products/eclipse/jetty/