You are viewing a plain text version of this content. The canonical link for it is here.
Posted to gitbox@activemq.apache.org by "cloudtracer (via GitHub)" <gi...@apache.org> on 2026/05/08 19:00:56 UTC
[I] jetty-http version 11.0.26 is vulnerable to CVE-2026-2332 [activemq]
cloudtracer opened a new issue, #1998:
URL: https://github.com/apache/activemq/issues/1998
Also a number of other CVEs, see https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-http/11.0.26 - is it possible to update this dependency?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: gitbox-unsubscribe@activemq.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: gitbox-unsubscribe@activemq.apache.org
For additional commands, e-mail: gitbox-help@activemq.apache.org
For further information, visit: https://activemq.apache.org/contact
Re: [I] jetty-http version 11.0.26 is vulnerable to CVE-2026-2332 [activemq]
Posted by "mattrpav (via GitHub)" <gi...@apache.org>.
mattrpav commented on issue #1998:
URL: https://github.com/apache/activemq/issues/1998#issuecomment-5151678204
This is resolved by the v6.3.0 release that migrated to Jetty 12.1
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: gitbox-unsubscribe@activemq.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: gitbox-unsubscribe@activemq.apache.org
For additional commands, e-mail: gitbox-help@activemq.apache.org
For further information, visit: https://activemq.apache.org/contact
Re: [I] jetty-http version 11.0.26 is vulnerable to CVE-2026-2332 [activemq]
Posted by "mattrpav (via GitHub)" <gi...@apache.org>.
mattrpav closed issue #1998: jetty-http version 11.0.26 is vulnerable to CVE-2026-2332
URL: https://github.com/apache/activemq/issues/1998
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: gitbox-unsubscribe@activemq.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: gitbox-unsubscribe@activemq.apache.org
For additional commands, e-mail: gitbox-help@activemq.apache.org
For further information, visit: https://activemq.apache.org/contact
Re: [I] jetty-http version 11.0.26 is vulnerable to CVE-2026-2332 [activemq]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #1998:
URL: https://github.com/apache/activemq/issues/1998#issuecomment-4931352605
This issue is stale because it has been open 60 days with no activity. Remove stale label or comment if you think it's still relevant.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: gitbox-unsubscribe@activemq.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: gitbox-unsubscribe@activemq.apache.org
For additional commands, e-mail: gitbox-help@activemq.apache.org
For further information, visit: https://activemq.apache.org/contact