maven package report

Is org.eclipse.jetty:jetty-util safe?

1 known vulnerability, worst severity MODERATE.

cvss

5.3

how bad it is if exploited, out of 10

epss

0.30%

chance of exploitation in the next 30 days

xyz score

not scored

CyberXYZ composite, out of 10

fig. 01 — GHSA-w7x5-g22v-xqhr, the advisory selected below

// advisories

GHSA-w7x5-g22v-xqhr

MODERATECVE-2026-8384

In Jetty 12.1.8, org.eclipse.jetty.util.URIUtil.canonicalPath() may leave dot-dot path segments unnormalized when a semicolon path parameter marker is followed by a slash and a dot

Affected: >= 12.0.0, <= 12.0.34
Fixed in: 12.0.35
Weakness: CWE-647
Published: 2026-07-22
Source: github

GHSA NVD MITRE reference reference reference reference reference reference reference reference

// dependencies

0 direct

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so maven packages are not covered.

Checked 2026-09-22 at 02:49 UTC. The most recent advisory here was published 2026-07-22. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is org.eclipse.jetty:jetty-util safe? maven package security report | CyberXYZ