{"id":"CLSA-2026-1794240586","summary":"TuxCare security update for org.eclipse.jetty (2 CVEs)","details":"TuxCare rebuilt 2 org.eclipse.jetty packages to address 2 CVEs. Fixed in 9.4.60.tuxcare0004.","modified":"2026-11-09T19:15:15.029692942Z","published":"2026-11-09T17:09:47Z","upstream":["CVE-2023-41900","CVE-2026-5795"],"affected":[{"package":{"name":"org.eclipse.jetty:jetty-jaspi","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.eclipse.jetty/jetty-jaspi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.60"},{"fixed":"9.4.60.tuxcare0004"}]}],"versions":["9.4.60","9.4.60.tuxcare0001","9.4.60.tuxcare0002","9.4.60.tuxcare0003"],"database_specific":{"tuxcare":{"fixed_version":"9.4.60.tuxcare0004","base_version":"9.4.60"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794240586.json"}},{"package":{"name":"org.eclipse.jetty:jetty-openid","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.eclipse.jetty/jetty-openid"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.60"},{"fixed":"9.4.60.tuxcare0004"}]}],"versions":["9.4.60","9.4.60.tuxcare0001","9.4.60.tuxcare0002","9.4.60.tuxcare0003"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794240586.json","tuxcare":{"base_version":"9.4.60","fixed_version":"9.4.60.tuxcare0004"}}}],"schema_version":"1.9.2"}