Package · Maven

org.eclipse.jetty.ee9:jetty-ee9-security

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 8.7

CVE-2026-10050

Digest authentication lossy encoding

In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historica…

Eclipse Foundation Eclipse Jetty Eclipse Jetty - EE8 Eclipse Jetty - EE9 Debian Ubuntu Wolfi Maven

Aug 4, 2026