Skip to content
OpenAdvisories

Vendor

Eclipse Jetty

2 known vulnerabilities.

Products

Eclipse Jetty 1 Jetty 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2025-5115

    MadeYouReset HTTP/2 vulnerability

    In Eclipse Jetty, versions <=9.4.57, <=10.0.25, <=11.0.25, <=12.0.21, <=12.1.0.alpha2, an HTTP/2 client may trigger the server to send RST_STREAM frames, for example by sending frames that are malformed or that should not be sent in a particular stream state,…

    Eclipse Jetty Eclipse Jetty jetty9 jetty9 Debian Ubuntu Maven