{"id":"CLSA-2026-1794257649","summary":"TuxCare security update for org.eclipse.jetty (2 CVEs)","details":"TuxCare rebuilt 2 org.eclipse.jetty packages to address 2 CVEs. Fixed in 9.4.24.v20191120-tuxcare.6.","modified":"2026-11-10T01:15:04.445685347Z","published":"2026-11-09T21:54:10Z","upstream":["CVE-2023-40167","CVE-2026-5795"],"affected":[{"package":{"name":"org.eclipse.jetty:jetty-http","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.eclipse.jetty/jetty-http"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.24.v20191120"},{"fixed":"9.4.24.v20191120-tuxcare.6"}]}],"versions":["9.4.24.v20191120","9.4.24.v20191120-tuxcare.1","9.4.24.v20191120-tuxcare.2","9.4.24.v20191120-tuxcare.3","9.4.24.v20191120-tuxcare.4","9.4.24.v20191120-tuxcare.5"],"database_specific":{"tuxcare":{"fixed_version":"9.4.24.v20191120-tuxcare.6","base_version":"9.4.24.v20191120"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794257649.json"}},{"package":{"name":"org.eclipse.jetty:jetty-jaspi","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.eclipse.jetty/jetty-jaspi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.4.24.v20191120"},{"fixed":"9.4.24.v20191120-tuxcare.6"}]}],"versions":["9.4.24.v20191120","9.4.24.v20191120-tuxcare.1","9.4.24.v20191120-tuxcare.2","9.4.24.v20191120-tuxcare.3","9.4.24.v20191120-tuxcare.4","9.4.24.v20191120-tuxcare.5"],"database_specific":{"tuxcare":{"base_version":"9.4.24.v20191120","fixed_version":"9.4.24.v20191120-tuxcare.6"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794257649.json"}}],"schema_version":"1.9.2"}