CVE-2022-2191: Eclipse Jetty

High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days.

In Eclipse Jetty versions 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, SslConnection does not release ByteBuffers from configured ByteBufferPool in case of error code paths.

Affected products

• Eclipse Jetty: from 10.0.0, up to and including 10.0.9; from 11.0.0, up to and including 11.0.9

Published 2022-07-07. Last modified 2026-06-17.