🛡️ CLSA-2026-1779065208 — apache-jsp

⚪ Unknown ✅ No Known Exploit OSV
N/A
CVSS Score
0 Low4 Medium7 High9 Critical10

Description

TuxCare security update for 123 packages (1 CVE) TuxCare rebuilt 123 packages to address 1 CVE. Fixed in 10.0.30.tuxcare0001.

Affected software and timeline

Affected software: org.eclipse.jetty:apache-jsp (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:apache-jstl (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:infinispan-common (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:infinispan-embedded (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:infinispan-embedded-query (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:infinispan-parent (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:infinispan-remote (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:infinispan-remote-query (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-alpn-client (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-alpn-conscrypt-client (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-alpn-conscrypt-server (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-alpn-java-client (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-alpn-java-server (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-alpn-parent (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-alpn-server (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-annotations (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-ant (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-bom (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-cdi (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-client (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-deploy (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-hazelcast (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-home (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-http (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-http-spi (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-io (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-jaas (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-jaspi (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-jmx (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-jndi (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-jspc-maven-plugin (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-keystore (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-maven-plugin (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-nosql (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-openid (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-p2 (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-plus (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-project (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-proxy (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-quickstart (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-rewrite (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-runner (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-security (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-server (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-servlet (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-servlets (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-slf4j-impl (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-start (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-unixdomain-server (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-unixsocket (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-unixsocket-client (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-unixsocket-common (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-unixsocket-server (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-util (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-util-ajax (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-webapp (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty:jetty-xml (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.demos:demo-async-rest-jar (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.demos:demo-async-rest-parent (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.demos:demo-async-rest-server (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.demos:demo-async-rest-webapp (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.demos:demo-container-initializer (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.demos:demo-jaas-webapp (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.demos:demo-jetty-webapp (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.demos:demo-jndi-webapp (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.demos:demo-jsp-webapp (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.demos:demo-mock-resources (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.demos:demo-proxy-webapp (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.demos:demo-simple-webapp (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.demos:demo-spec (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.demos:demo-spec-webapp (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.demos:demo-web-fragment (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.demos:demos-jetty-embedded (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.demos:demos-parent (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.documentation:code-examples (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.documentation:documentation-parent (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.documentation:jetty (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.fcgi:fcgi-client (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.fcgi:fcgi-parent (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.fcgi:fcgi-server (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.gcloud:gcloud-parent (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.gcloud:jetty-gcloud-session-manager (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.http2:http2-client (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.http2:http2-common (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.http2:http2-hpack (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.http2:http2-http-client-transport (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.http2:http2-parent (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.http2:http2-server (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.http3:http3-client (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.http3:http3-common (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.http3:http3-http-client-transport (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.http3:http3-parent (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.http3:http3-qpack (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.http3:http3-server (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.memcached:jetty-memcached-sessions (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.memcached:memcached-parent (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.osgi:jetty-httpservice (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.osgi:jetty-osgi-alpn (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.osgi:jetty-osgi-boot (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.osgi:jetty-osgi-boot-jsp (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.osgi:jetty-osgi-boot-warurl (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.osgi:jetty-osgi-project (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.osgi:test-jetty-osgi (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.quic:quic-client (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.quic:quic-common (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.quic:quic-parent (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.quic:quic-quiche (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.quic:quic-quiche-common (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.quic:quic-quiche-foreign-incubator (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.quic:quic-quiche-jna (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.quic:quic-server (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.websocket:websocket-core-client (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.websocket:websocket-core-common (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.websocket:websocket-core-server (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.websocket:websocket-javax-client (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.websocket:websocket-javax-common (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.websocket:websocket-javax-server (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.websocket:websocket-jetty-api (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.websocket:websocket-jetty-client (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.websocket:websocket-jetty-common (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.websocket:websocket-jetty-server (fixed in 10.0.30.tuxcare0001), org.eclipse.jetty.websocket:websocket-parent (fixed in 10.0.30.tuxcare0001) and org.eclipse.jetty.websocket:websocket-servlet (fixed in 10.0.30.tuxcare0001). Published on 4 August 2026 and last revised on 7 August 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.

Details

Severity Unknown
CVSS Score N/A
CVSS Vector N/A
CWE N/A
Public Exploit ✅ No
Source OSV
Published 2026-08-04
Updated 2026-08-12
Modified 2026-08-07
Fix URL N/A

Affected Packages

Software From version Fixed in
org.eclipse.jetty:apache-jsp 10.0.30.tuxcare0001
org.eclipse.jetty:apache-jstl 10.0.30.tuxcare0001
org.eclipse.jetty:infinispan-common 10.0.30.tuxcare0001
org.eclipse.jetty:infinispan-embedded 10.0.30.tuxcare0001
org.eclipse.jetty:infinispan-embedded-query 10.0.30.tuxcare0001
org.eclipse.jetty:infinispan-parent 10.0.30.tuxcare0001
org.eclipse.jetty:infinispan-remote 10.0.30.tuxcare0001
org.eclipse.jetty:infinispan-remote-query 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-alpn-client 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-alpn-conscrypt-client 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-alpn-conscrypt-server 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-alpn-java-client 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-alpn-java-server 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-alpn-parent 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-alpn-server 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-annotations 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-ant 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-bom 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-cdi 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-client 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-deploy 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-hazelcast 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-home 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-http 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-http-spi 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-io 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-jaas 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-jaspi 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-jmx 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-jndi 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-jspc-maven-plugin 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-keystore 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-maven-plugin 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-nosql 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-openid 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-p2 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-plus 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-project 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-proxy 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-quickstart 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-rewrite 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-runner 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-security 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-server 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-servlet 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-servlets 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-slf4j-impl 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-start 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-unixdomain-server 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-unixsocket 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-unixsocket-client 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-unixsocket-common 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-unixsocket-server 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-util 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-util-ajax 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-webapp 10.0.30.tuxcare0001
org.eclipse.jetty:jetty-xml 10.0.30.tuxcare0001
org.eclipse.jetty.demos:demo-async-rest-jar 10.0.30.tuxcare0001
org.eclipse.jetty.demos:demo-async-rest-parent 10.0.30.tuxcare0001
org.eclipse.jetty.demos:demo-async-rest-server 10.0.30.tuxcare0001
org.eclipse.jetty.demos:demo-async-rest-webapp 10.0.30.tuxcare0001
org.eclipse.jetty.demos:demo-container-initializer 10.0.30.tuxcare0001
org.eclipse.jetty.demos:demo-jaas-webapp 10.0.30.tuxcare0001
org.eclipse.jetty.demos:demo-jetty-webapp 10.0.30.tuxcare0001
org.eclipse.jetty.demos:demo-jndi-webapp 10.0.30.tuxcare0001
org.eclipse.jetty.demos:demo-jsp-webapp 10.0.30.tuxcare0001
org.eclipse.jetty.demos:demo-mock-resources 10.0.30.tuxcare0001
org.eclipse.jetty.demos:demo-proxy-webapp 10.0.30.tuxcare0001
org.eclipse.jetty.demos:demo-simple-webapp 10.0.30.tuxcare0001
org.eclipse.jetty.demos:demo-spec 10.0.30.tuxcare0001
org.eclipse.jetty.demos:demo-spec-webapp 10.0.30.tuxcare0001
org.eclipse.jetty.demos:demo-web-fragment 10.0.30.tuxcare0001
org.eclipse.jetty.demos:demos-jetty-embedded 10.0.30.tuxcare0001
org.eclipse.jetty.demos:demos-parent 10.0.30.tuxcare0001
org.eclipse.jetty.documentation:code-examples 10.0.30.tuxcare0001
org.eclipse.jetty.documentation:documentation-parent 10.0.30.tuxcare0001
org.eclipse.jetty.documentation:jetty 10.0.30.tuxcare0001
org.eclipse.jetty.fcgi:fcgi-client 10.0.30.tuxcare0001
org.eclipse.jetty.fcgi:fcgi-parent 10.0.30.tuxcare0001
org.eclipse.jetty.fcgi:fcgi-server 10.0.30.tuxcare0001
org.eclipse.jetty.gcloud:gcloud-parent 10.0.30.tuxcare0001
org.eclipse.jetty.gcloud:jetty-gcloud-session-manager 10.0.30.tuxcare0001
org.eclipse.jetty.http2:http2-client 10.0.30.tuxcare0001
org.eclipse.jetty.http2:http2-common 10.0.30.tuxcare0001
org.eclipse.jetty.http2:http2-hpack 10.0.30.tuxcare0001
org.eclipse.jetty.http2:http2-http-client-transport 10.0.30.tuxcare0001
org.eclipse.jetty.http2:http2-parent 10.0.30.tuxcare0001
org.eclipse.jetty.http2:http2-server 10.0.30.tuxcare0001
org.eclipse.jetty.http3:http3-client 10.0.30.tuxcare0001
org.eclipse.jetty.http3:http3-common 10.0.30.tuxcare0001
org.eclipse.jetty.http3:http3-http-client-transport 10.0.30.tuxcare0001
org.eclipse.jetty.http3:http3-parent 10.0.30.tuxcare0001
org.eclipse.jetty.http3:http3-qpack 10.0.30.tuxcare0001
org.eclipse.jetty.http3:http3-server 10.0.30.tuxcare0001
org.eclipse.jetty.memcached:jetty-memcached-sessions 10.0.30.tuxcare0001
org.eclipse.jetty.memcached:memcached-parent 10.0.30.tuxcare0001
org.eclipse.jetty.osgi:jetty-httpservice 10.0.30.tuxcare0001
org.eclipse.jetty.osgi:jetty-osgi-alpn 10.0.30.tuxcare0001
org.eclipse.jetty.osgi:jetty-osgi-boot 10.0.30.tuxcare0001
org.eclipse.jetty.osgi:jetty-osgi-boot-jsp 10.0.30.tuxcare0001
org.eclipse.jetty.osgi:jetty-osgi-boot-warurl 10.0.30.tuxcare0001
org.eclipse.jetty.osgi:jetty-osgi-project 10.0.30.tuxcare0001
org.eclipse.jetty.osgi:test-jetty-osgi 10.0.30.tuxcare0001
org.eclipse.jetty.quic:quic-client 10.0.30.tuxcare0001
org.eclipse.jetty.quic:quic-common 10.0.30.tuxcare0001
org.eclipse.jetty.quic:quic-parent 10.0.30.tuxcare0001
org.eclipse.jetty.quic:quic-quiche 10.0.30.tuxcare0001
org.eclipse.jetty.quic:quic-quiche-common 10.0.30.tuxcare0001
org.eclipse.jetty.quic:quic-quiche-foreign-incubator 10.0.30.tuxcare0001
org.eclipse.jetty.quic:quic-quiche-jna 10.0.30.tuxcare0001
org.eclipse.jetty.quic:quic-server 10.0.30.tuxcare0001
org.eclipse.jetty.websocket:websocket-core-client 10.0.30.tuxcare0001
org.eclipse.jetty.websocket:websocket-core-common 10.0.30.tuxcare0001
org.eclipse.jetty.websocket:websocket-core-server 10.0.30.tuxcare0001
org.eclipse.jetty.websocket:websocket-javax-client 10.0.30.tuxcare0001
org.eclipse.jetty.websocket:websocket-javax-common 10.0.30.tuxcare0001
org.eclipse.jetty.websocket:websocket-javax-server 10.0.30.tuxcare0001
org.eclipse.jetty.websocket:websocket-jetty-api 10.0.30.tuxcare0001
org.eclipse.jetty.websocket:websocket-jetty-client 10.0.30.tuxcare0001
org.eclipse.jetty.websocket:websocket-jetty-common 10.0.30.tuxcare0001
org.eclipse.jetty.websocket:websocket-jetty-server 10.0.30.tuxcare0001
org.eclipse.jetty.websocket:websocket-parent 10.0.30.tuxcare0001
org.eclipse.jetty.websocket:websocket-servlet 10.0.30.tuxcare0001

References

N/A

Free Vulnerability Check

Is your site affected by CLSA-2026-1779065208?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against CLSA-2026-1779065208 and other known CVE records.

Scan My Site Free →

No credit card required  ·  Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

More CLSA 2026 advisories

Part of CLSA 2026 in the advisory index.