{"action":"Upgrade org.eclipse.jetty.http3:http3-common to 10.0.20 (10.x) or 11.0.20 (11.x) or later.","affected":[{"fixed":"10.0.20","introduced":"10.0.8"},{"fixed":"11.0.20","introduced":"11.0.8"}],"component":"org.eclipse.jetty.http3:http3-common","cve_ids":["CVE-2024-22201"],"ecosystem":"Maven","epss":0.01433,"exploited":false,"fixed_versions":["10.0.20","11.0.20"],"ghsa_id":"GHSA-rggv-cv7r-mw98","id":"tcs_01M5N9BT18AR98GDX1PBKNP0QG","modified_at":"2026-09-10T03:50:10.177890306Z","published_at":"2024-02-26T20:13:46Z","references":["https://osv.dev/vulnerability/GHSA-rggv-cv7r-mw98","https://github.com/jetty/jetty.project/security/advisories/GHSA-rggv-cv7r-mw98","https://nvd.nist.gov/vuln/detail/CVE-2024-22201","https://github.com/jetty/jetty.project/issues/11256","https://github.com/jetty/jetty.project/issues/11259","https://github.com/jetty/jetty.project/commit/0839a208cdc3fcfe25206a77af59ba9fda260188","https://github.com/jetty/jetty.project/commit/b953871c9a5ff4fbca4a2499848f75182dbd9810","https://github.com/jetty/jetty.project","https://lists.debian.org/debian-lts-announce/2024/04/msg00002.html","https://security.netapp.com/advisory/ntap-20240329-0001","http://www.openwall.com/lists/oss-security/2024/03/20/2"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-rggv-cv7r-mw98#Maven/org.eclipse.jetty.http3:http3-common","url":"https://osv.dev/vulnerability/GHSA-rggv-cv7r-mw98"}],"summary":"Connection leaking on idle timeout when TCP congested"}