Debian/jetty12: high 7.5
In Eclipse Jetty versions 12.0.0 to 12.0.16 included, an HTTP/2 client can specify a very large value for the HTTP/2 settings parameter SETTINGS_MAX_HEADER_LIST_SIZE. The Jetty HTTP/2 server does not
Action: Upgrade jetty12 to 12.0.17-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 12.0.17-1 | - |
Fixed versions
| 12.0.17-1 |
Sources
published · modified · JSON