Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 18:41:13 +0000 CVE-2026-18659 — Unauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substring https://db.gcve.eu/vuln/cve-2026-18659 <p><strong>Affected:</strong> Eclipse Foundation org.eclipse.jetty.ee11:jetty-ee11-servlet, Eclipse Foundation org.eclipse.jetty.ee10:jetty-ee10-servlet, Eclipse Foundation org.eclipse.jetty.ee9:jetty-ee9-security, Eclipse Foundation org.eclipse.jetty.ee8:jetty-ee8-security, Eclipse Foundation org.eclipse.jetty:jetty-security</p> <p>In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, and `jetty-eeN-servlet`, the Jakarta Spec constraints defined as `http-method-omission` can be bypassed by using substrings of the defined HTTP Methods.</p> <p><strong>Affected:</strong> Eclipse Foundation org.eclipse.jetty.ee11:jetty-ee11-servlet, Eclipse Foundation org.eclipse.jetty.ee10:jetty-ee10-servlet, Eclipse Foundation org.eclipse.jetty.ee9:jetty-ee9-security, Eclipse Foundation org.eclipse.jetty.ee8:jetty-ee8-security, Eclipse Foundation org.eclipse.jetty:jetty-security</p> <p>In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, and `jetty-eeN-servlet`, the Jakarta Spec constraints defined as `http-method-omission` can be bypassed by using substrings of the defined HTTP Methods.</p> https://db.gcve.eu/vuln/cve-2026-18659