There is a vulnerability in Jetty: Java based HTTP/1.x, HTTP/2, Servlet, WebSocket Server 9.4.17.v20190418,upgrade recommended · Issue #147 · qunarcorp/qmq · GitHub

There is a vulnerability in Jetty: Java based HTTP/1.x, HTTP/2, Servlet, WebSocket Server 9.4.17.v20190418,upgrade recommended #147

Open

QiAnXinCodeSafe

opened

on Jul 21, 2021

Line 89 in a285a88

<jetty.version>9.4.17.v20190418</jetty.version>

CVE-2021-28165 CVE-2020-27216 CVE-2020-27223 CVE-2021-28169 CVE-2020-27218

Recommended upgrade version：9.4.39-2

Metadata

Assignees

No one assigned

Labels

No labels

No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests