org.eclipse.jetty.ee10:jetty-ee10-jaspi (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package org.eclipse.jetty.ee10:jetty-ee10-jaspi, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (1)

• CVE-2026-5795 — CVSS 7.4 (high): In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable. Upon returning from…