{"action":"Upgrade jetty12 to 12.0.32-1 or later.","affected":[{"fixed":"12.0.32-1","introduced":"0"}],"component":"jetty12","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["12.0.32-1"],"id":"tcs_01M5NQPH345GM9HDBF5P0TW2ND","modified_at":"2026-10-01T03:02:26.284440829Z","published_at":"2026-03-05T10:15:56.890Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-1605","https://security-tracker.debian.org/tracker/CVE-2026-1605"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-1605#Debian:14/jetty12","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-1605"}],"summary":"In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP request, with Content-Encoding: gzip, is processed and the corresponding r"}