jetty.project vulnerabilities

1 known vulnerability in jetty.project from Jetty. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  jetty.project: Allocation of Resources Without Limits or Throttling

  CVE-2024-22201Feb 26, 2024JettyEPSS 1.43%

  Jetty is a Java based web server and servlet engine. An HTTP/2 SSL connection that is established and TCP congested will be leaked when it times out. An attacker can cause many connections to end up in this state, and the server may run out of file descriptors