https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T05:20:24.209519+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cleanstart-2026-mf87519 CLEANSTART-2026-MF87519 — Security fix for CVE-2024-7708 applied in: solr 9.8.1-r1 2026-10-03T05:20:29.719594+00:00

Affected: CleanStart: solr

Security vulnerability affects the solr package. This issue is resolved in later releases. See references for vulnerability details.

 https://vulnerability.circl.lu/vuln/fkie_cve-2024-7708 fkie_cve-2024-7708 2026-10-03T05:20:29.719718+00:00

For requests that have a body, but reading the body may end up in reading 0 bytes, there is a buffer leak. This is particularly the case for 100-Continue, but any request where the network is slow can leak.

 https://vulnerability.circl.lu/vuln/ghsa-9299-c6m4-mjhc GHSA-9299-c6m4-mjhc — Eclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requests 2026-10-03T05:20:29.719786+00:00

Affected: Maven: org.eclipse.jetty:jetty-server

### Impact The original report:

> Server handling of 100-Continue requests can lead to memory leak that can be abused to cause a Denial of Service state.

After investigation, turns out that every request that has a body, but reading the body may end up in reading 0 bytes, leaks a buffer. This is particularly the case for 100-Continue, but any request where the network is slow can leak.

### Affected Versions

* Jetty 11.0.0-11.0.22 (EOL) * Jetty 10.0.0-10.0.22 (EOL)

### Patched Versions

* Jetty 11.0.23 * Jetty 10.0.23

### Patches

https://github.com/jetty/jetty.project/pull/12156

### Workarounds

No workarounds.

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2024-7708 UBUNTU-CVE-2024-7708 2026-10-03T05:20:29.719876+00:00

Affected: Ubuntu:16.04:LTS: jetty9, Ubuntu:18.04:LTS: jetty9, Ubuntu:20.04:LTS: jetty9, Ubuntu:22.04:LTS: jetty9, Ubuntu:24.04:LTS: jetty9, Ubuntu:26.04:LTS: jetty12, Ubuntu:26.04:LTS: jetty9

For requests that have a body, but reading the body may end up in reading 0 bytes, there is a buffer leak. This is particularly the case for 100-Continue, but any request where the network is slow can leak.

 https://vulnerability.circl.lu/vuln/wid-sec-w-2026-2314 WID-SEC-W-2026-2314 — Eclipse Jetty: Mehrere Schwachstellen 2026-10-03T05:20:29.719947+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Eclipse Jetty ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen offenzulegen.