Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-2191
7.5
HIGHCVSS v3
Severity scale
010
Description
In Eclipse Jetty versions 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, SslConnection does not release ByteBuffers from configured ByteBufferPool in case of error code paths.
jetty/jetty.project
GitHubEclipse Jetty® - Web Container & Clients - supports HTTP/3, HTTP/2, HTTP/1, websocket, servlets, and more
GitHubEclipse Jetty® - Web Container & Clients - supports HTTP/3, HTTP/2, HTTP/1, websocket, servlets, and moreNVD