Vulnerabilities
Eclipse Jetty Flaw Leaks Proxy Credentials via Misinterpreted 407 Errors
A high-severity vulnerability in Eclipse Jetty allows servers to capture proxy authentication credentials when clients misinterpret HTTP error responses.
Eclipse Jetty
Everything Patch Gazette has reported about Eclipse Jetty: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Eclipse Jetty security flaw CVE-2026-18661 bypasses annotations in mixed configurations
A high-severity flaw in Eclipse Jetty allows security constraint bypasses when web.xml contains multiple URL patterns, affecting versions up to 12.1.11.