org.eclipse.jetty:jetty-server

1 result · Clear filters · Feed

• High 8.8
  CVE-2026-18660

  Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames

  In Eclipse Jetty, across various versions of `jetty-server`, and `jetty-proxy`, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case.

  Eclipse Foundation org.eclipse.jetty:jetty-proxy org.eclipse.jetty:jetty-server jetty9 Debian Ubuntu
  Oct 15, 2026