Are there public exploits for jetty org.eclipse.jetty.http2:jetty-http2-common vulnerabilities?

Yes — 1 of jetty org.eclipse.jetty.http2:jetty-http2-common's CVEs have a known public exploit.

What are the most common weakness types in jetty org.eclipse.jetty.http2:jetty-http2-common CVEs?

jetty org.eclipse.jetty.http2:jetty-http2-common's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption).

What is the average severity of jetty org.eclipse.jetty.http2:jetty-http2-common CVEs?

The average CVSS base score across jetty org.eclipse.jetty.http2:jetty-http2-common's scored CVEs is 7.6.

jetty org.eclipse.jetty.http2:jetty-http2-common Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: jetty org.eclipse.jetty.http2:jetty-http2-common vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

jetty org.eclipse.jetty.http2:jetty-http2-common Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

jetty org.eclipse.jetty.http2:jetty-http2-common has 3 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting jetty org.eclipse.jetty.http2:jetty-http2-common, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of jetty org.eclipse.jetty.http2:jetty-http2-common's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High3

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of jetty org.eclipse.jetty.http2:jetty-http2-common's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of jetty org.eclipse.jetty.http2:jetty-http2-common's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every jetty org.eclipse.jetty.http2:jetty-http2-common version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

12.0.0 <= v < 12.0.171 CVE
12.0.0 <= v < 12.0.251 CVE
12.0.0 <= v < 12.0.61 CVE
12.1.0.alpha0 <= v < 12.1.0.beta31 CVE

Fixed in

12.0.171 CVE
12.0.251 CVE
12.0.61 CVE
12.1.0.beta31 CVE

Find a version

3 CVEs

Sort

MadeYouReset HTTP/2 vulnerability
CVE-2025-5115
Patch
CWE-400
High · CVSS 7.7
EPSS 3.5% (88th pct)2025-08-20
Eclipse Jetty HTTP clients can increase memory allocation
CVE-2025-1948
Patch
CWE-400
High · CVSS 7.5
EPSS 0.7% (52th pct)2025-05-08
Jetty connection leaking on idle timeout when TCP congested
CVE-2024-22201
Public exploit
Patch
CWE-400
High · CVSS 7.5
EPSS 1.4% (71th pct)2024-02-26

Common weakness types

The CWE weakness categories most often found in jetty org.eclipse.jetty.http2:jetty-http2-common CVEs. Follow any weakness for its full explanation.

CWE-400Uncontrolled Resource Consumption3 CVEs

Disclosure activity by year

How many jetty org.eclipse.jetty.http2:jetty-http2-common CVEs were published each year.

2024

2025

Other jetty products

Browse vulnerabilities for other products by jetty.

jetty.project26 CVEs org.eclipse.jetty:jetty-server6 CVEs jetty http server4 CVEs jetty3 CVEs org.eclipse.jetty:jetty-http3 CVEs org.eclipse.jetty.http2:http2-common2 CVEs org.eclipse.jetty:jetty-servlets2 CVEs

Frequently asked questions

Common questions about jetty org.eclipse.jetty.http2:jetty-http2-common vulnerabilities.

How many CVEs does jetty org.eclipse.jetty.http2:jetty-http2-common have?: jetty org.eclipse.jetty.http2:jetty-http2-common has 3 published CVE records since 2024.
How many jetty org.eclipse.jetty.http2:jetty-http2-common CVEs are in CISA KEV?: None of jetty org.eclipse.jetty.http2:jetty-http2-common's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for jetty org.eclipse.jetty.http2:jetty-http2-common vulnerabilities?: Yes — 1 of jetty org.eclipse.jetty.http2:jetty-http2-common's CVEs have a known public exploit.
Which versions of jetty org.eclipse.jetty.http2:jetty-http2-common are affected?: 8 distinct jetty org.eclipse.jetty.http2:jetty-http2-common versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in jetty org.eclipse.jetty.http2:jetty-http2-common CVEs?: jetty org.eclipse.jetty.http2:jetty-http2-common's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption).
What is the average severity of jetty org.eclipse.jetty.http2:jetty-http2-common CVEs?: The average CVSS base score across jetty org.eclipse.jetty.http2:jetty-http2-common's scored CVEs is 7.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track jetty org.eclipse.jetty.http2:jetty-http2-common vulnerabilities

Monitor new jetty org.eclipse.jetty.http2:jetty-http2-common vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing