{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5795.json" } ], "title": "org.eclipse.jetty.ee10/jetty-ee10: early return from the JASPIAuthenticator class without clearing ThreadLocal variables", "tracking": { "current_release_date": "2026-08-13T16:49:15+00:00", "generator": { "date": "2026-08-13T16:49:15+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.3.15" } }, "id": "CVE-2026-5795", "initial_release_date": "2026-04-08T13:32:28.935000+00:00", "revision_history": [ { "date": "2026-04-08T13:32:28.935000+00:00", "number": "1", "summary": "Initial version" }, { "date": "2026-04-29T05:03:58+00:00", "number": "2", "summary": "Current version" }, { "date": "2026-08-13T16:49:15+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Data Grid 8", "product": { "name": "Red Hat Data Grid 8", "product_id": "red_hat_data_grid_8", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_data_grid:8" } } } ], "category": "product_family", "name": "Red Hat Data Grid 8" }, { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Enterprise Application Platform 8", "product": { "name": "Red Hat JBoss Enterprise Application Platform 8", "product_id": "red_hat_jboss_enterprise_application_platform_8", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:8" } } } ], "category": "product_family", "name": "Red Hat JBoss Enterprise Application Platform 8" }, { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack", "product": { "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack", "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack", "product_identification_helper": { "cpe": "cpe:/a:redhat:jbosseapxp" } } } ], "category": "product_family", "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack" }, { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Dev Spaces", "product": { "name": "Red Hat OpenShift Dev Spaces", "product_id": "red_hat_openshift_dev_spaces", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_devspaces:3" } } } ], "category": "product_family", "name": "Red Hat OpenShift Dev Spaces" }, { "branches": [ { "category": "product_name", "name": "streams for Apache Kafka 3", "product": { "name": "streams for Apache Kafka 3", "product_id": "streams_for_apache_kafka_3", "product_identification_helper": { "cpe": "cpe:/a:redhat:amq_streams:3" } } } ], "category": "product_family", "name": "streams for Apache Kafka 3" }, { "branches": [ { "category": "product_name", "name": "HawtIO HawtIO 4.4.0", "product": { "name": "HawtIO HawtIO 4.4.0", "product_id": "HawtIO HawtIO 4.4.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:apache_camel_hawtio:4.4::el9" } } }, { "category": "product_name", "name": "Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14", "product": { "name": "Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14", "product_id": "Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14", "product_identification_helper": { "cpe": "cpe:/a:redhat:apache_camel_spring_boot:4.18" } } } ], "category": "product_family", "name": "Red Hat Build of Apache Camel" }, { "branches": [ { "category": "product_name", "name": "Red Hat Offline Knowledge Portal 1.2.10", "product": { "name": "Red Hat Offline Knowledge Portal 1.2.10", "product_id": "Red Hat Offline Knowledge Portal 1.2.10", "product_identification_helper": { "cpe": "cpe:/a:redhat:offline_knowledge_portal:1.2::el9" } } } ], "category": "product_family", "name": "Red Hat Offline Knowledge Portal" }, { "category": "product_version", "name": "jetty-ee10-servlet", "product": { "name": "jetty-ee10-servlet", "product_id": "jetty-ee10-servlet", "product_identification_helper": { "purl": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet" } } }, { "category": "product_version", "name": "jetty-ee10-annotations", "product": { "name": "jetty-ee10-annotations", "product_id": "jetty-ee10-annotations", "product_identification_helper": { "purl": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-annotations" } } }, { "category": "product_version", "name": "jetty-ee10-apache-jsp", "product": { "name": "jetty-ee10-apache-jsp", "product_id": "jetty-ee10-apache-jsp", "product_identification_helper": { "purl": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-apache-jsp" } } }, { "category": "product_version", "name": "jetty-ee10-cdi", "product": { "name": "jetty-ee10-cdi", "product_id": "jetty-ee10-cdi", "product_identification_helper": { "purl": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-cdi" } } }, { "category": "product_version", "name": "jetty-ee10-fcgi-proxy", "product": { "name": "jetty-ee10-fcgi-proxy", "product_id": "jetty-ee10-fcgi-proxy", "product_identification_helper": { "purl": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-fcgi-proxy" } } }, { "category": "product_version", "name": "jetty-ee10-glassfish-jstl", "product": { "name": "jetty-ee10-glassfish-jstl", "product_id": "jetty-ee10-glassfish-jstl", "product_identification_helper": { "purl": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-glassfish-jstl" } } }, { "category": "product_version", "name": "jetty-ee10-home", "product": { "name": "jetty-ee10-home", "product_id": "jetty-ee10-home", "product_identification_helper": { "purl": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-home" } } }, { "category": "product_version", "name": "jetty-ee10-jaspi", "product": { "name": "jetty-ee10-jaspi", "product_id": "jetty-ee10-jaspi", "product_identification_helper": { "purl": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-jaspi" } } }, { "category": "product_version", "name": "jetty-ee10-jndi", "product": { "name": "jetty-ee10-jndi", "product_id": "jetty-ee10-jndi", "product_identification_helper": { "purl": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-jndi" } } }, { "category": "product_version", "name": "jetty-ee10-jspc-maven-plugin", "product": { "name": "jetty-ee10-jspc-maven-plugin", "product_id": "jetty-ee10-jspc-maven-plugin", "product_identification_helper": { "purl": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-jspc-maven-plugin" } } }, { "category": "product_version", "name": "jetty-ee10-maven-plugin", "product": { "name": "jetty-ee10-maven-plugin", "product_id": "jetty-ee10-maven-plugin", "product_identification_helper": { "purl": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-maven-plugin" } } }, { "category": "product_version", "name": "jetty-ee10-plus", "product": { "name": "jetty-ee10-plus", "product_id": "jetty-ee10-plus", "product_identification_helper": { "purl": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-plus" } } }, { "category": "product_version", "name": "jetty-ee10-proxy", "product": { "name": "jetty-ee10-proxy", "product_id": "jetty-ee10-proxy", "product_identification_helper": { "purl": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-proxy" } } }, { "category": "product_version", "name": "jetty-ee10-quickstart", "product": { "name": "jetty-ee10-quickstart", "product_id": "jetty-ee10-quickstart", "product_identification_helper": { "purl": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-quickstart" } } }, { "category": "product_version", "name": "jetty-ee10-servlets", "product": { "name": "jetty-ee10-servlets", "product_id": "jetty-ee10-servlets", "product_identification_helper": { "purl": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlets" } } }, { "category": "product_version", "name": "jetty-ee10-webapp", "product": { "name": "jetty-ee10-webapp", "product_id": "jetty-ee10-webapp", "product_identification_helper": { "purl": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-webapp" } } }, { "category": "product_version", "name": "devspaces/openvsx-rhel9", "product": { "name": "devspaces/openvsx-rhel9", "product_id": "devspaces/openvsx-rhel9", "product_identification_helper": { "purl": "pkg:oci/openvsx-rhel9?repository_url=registry.redhat.io/devspaces/openvsx-rhel9" } } }, { "category": "product_version", "name": "devspaces/pluginregistry-rhel9", "product": { "name": "devspaces/pluginregistry-rhel9", "product_id": "devspaces/pluginregistry-rhel9", "product_identification_helper": { "purl": "pkg:oci/pluginregistry-rhel9?repository_url=registry.redhat.io/devspaces/pluginregistry-rhel9" } } }, { "branches": [ { "category": "product_version", "name": "registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:c0b2c8c0cf4ff8340aef1ce4e92fbf0dee4fc0b88a0c17659ad018f2fc21513a_amd64", "product": { "name": "registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:c0b2c8c0cf4ff8340aef1ce4e92fbf0dee4fc0b88a0c17659ad018f2fc21513a_amd64", "product_id": "registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:c0b2c8c0cf4ff8340aef1ce4e92fbf0dee4fc0b88a0c17659ad018f2fc21513a_amd64", "product_identification_helper": { "purl": "pkg:oci/rhokp-rhel9@sha256%3Ac0b2c8c0cf4ff8340aef1ce4e92fbf0dee4fc0b88a0c17659ad018f2fc21513a?arch=amd64&repository_url=registry.redhat.io/offline-knowledge-portal/rhokp-rhel9&tag=1782239370" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:9620b543dab8aa6e7a2f372890512c885c4beb6098d61fc5dd68e15cb0e2cc22_arm64", "product": { "name": "registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:9620b543dab8aa6e7a2f372890512c885c4beb6098d61fc5dd68e15cb0e2cc22_arm64", "product_id": "registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:9620b543dab8aa6e7a2f372890512c885c4beb6098d61fc5dd68e15cb0e2cc22_arm64", "product_identification_helper": { "purl": "pkg:oci/rhokp-rhel9@sha256%3A9620b543dab8aa6e7a2f372890512c885c4beb6098d61fc5dd68e15cb0e2cc22?arch=arm64&repository_url=registry.redhat.io/offline-knowledge-portal/rhokp-rhel9&tag=1782239370" } } } ], "category": "architecture", "name": "arm64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:9620b543dab8aa6e7a2f372890512c885c4beb6098d61fc5dd68e15cb0e2cc22_arm64 as a component of Red Hat Offline Knowledge Portal 1.2.10", "product_id": "Red Hat Offline Knowledge Portal 1.2.10:registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:9620b543dab8aa6e7a2f372890512c885c4beb6098d61fc5dd68e15cb0e2cc22_arm64" }, "product_reference": "registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:9620b543dab8aa6e7a2f372890512c885c4beb6098d61fc5dd68e15cb0e2cc22_arm64", "relates_to_product_reference": "Red Hat Offline Knowledge Portal 1.2.10" }, { "category": "default_component_of", "full_product_name": { "name": "registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:c0b2c8c0cf4ff8340aef1ce4e92fbf0dee4fc0b88a0c17659ad018f2fc21513a_amd64 as a component of Red Hat Offline Knowledge Portal 1.2.10", "product_id": "Red Hat Offline Knowledge Portal 1.2.10:registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:c0b2c8c0cf4ff8340aef1ce4e92fbf0dee4fc0b88a0c17659ad018f2fc21513a_amd64" }, "product_reference": "registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:c0b2c8c0cf4ff8340aef1ce4e92fbf0dee4fc0b88a0c17659ad018f2fc21513a_amd64", "relates_to_product_reference": "Red Hat Offline Knowledge Portal 1.2.10" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-servlet as a component of Red Hat Data Grid 8", "product_id": "red_hat_data_grid_8:jetty-ee10-servlet" }, "product_reference": "jetty-ee10-servlet", "relates_to_product_reference": "red_hat_data_grid_8" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-annotations as a component of Red Hat JBoss Enterprise Application Platform 8", "product_id": "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-annotations" }, "product_reference": "jetty-ee10-annotations", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_8" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-apache-jsp as a component of Red Hat JBoss Enterprise Application Platform 8", "product_id": "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-apache-jsp" }, "product_reference": "jetty-ee10-apache-jsp", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_8" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-cdi as a component of Red Hat JBoss Enterprise Application Platform 8", "product_id": "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-cdi" }, "product_reference": "jetty-ee10-cdi", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_8" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-fcgi-proxy as a component of Red Hat JBoss Enterprise Application Platform 8", "product_id": "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-fcgi-proxy" }, "product_reference": "jetty-ee10-fcgi-proxy", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_8" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-glassfish-jstl as a component of Red Hat JBoss Enterprise Application Platform 8", "product_id": "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-glassfish-jstl" }, "product_reference": "jetty-ee10-glassfish-jstl", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_8" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-home as a component of Red Hat JBoss Enterprise Application Platform 8", "product_id": "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-home" }, "product_reference": "jetty-ee10-home", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_8" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-jaspi as a component of Red Hat JBoss Enterprise Application Platform 8", "product_id": "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-jaspi" }, "product_reference": "jetty-ee10-jaspi", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_8" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-jndi as a component of Red Hat JBoss Enterprise Application Platform 8", "product_id": "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-jndi" }, "product_reference": "jetty-ee10-jndi", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_8" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-jspc-maven-plugin as a component of Red Hat JBoss Enterprise Application Platform 8", "product_id": "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-jspc-maven-plugin" }, "product_reference": "jetty-ee10-jspc-maven-plugin", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_8" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-maven-plugin as a component of Red Hat JBoss Enterprise Application Platform 8", "product_id": "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-maven-plugin" }, "product_reference": "jetty-ee10-maven-plugin", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_8" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-plus as a component of Red Hat JBoss Enterprise Application Platform 8", "product_id": "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-plus" }, "product_reference": "jetty-ee10-plus", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_8" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-proxy as a component of Red Hat JBoss Enterprise Application Platform 8", "product_id": "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-proxy" }, "product_reference": "jetty-ee10-proxy", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_8" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-quickstart as a component of Red Hat JBoss Enterprise Application Platform 8", "product_id": "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-quickstart" }, "product_reference": "jetty-ee10-quickstart", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_8" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-servlet as a component of Red Hat JBoss Enterprise Application Platform 8", "product_id": "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-servlet" }, "product_reference": "jetty-ee10-servlet", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_8" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-servlets as a component of Red Hat JBoss Enterprise Application Platform 8", "product_id": "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-servlets" }, "product_reference": "jetty-ee10-servlets", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_8" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-webapp as a component of Red Hat JBoss Enterprise Application Platform 8", "product_id": "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-webapp" }, "product_reference": "jetty-ee10-webapp", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_8" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-annotations as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack", "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-annotations" }, "product_reference": "jetty-ee10-annotations", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-apache-jsp as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack", "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-apache-jsp" }, "product_reference": "jetty-ee10-apache-jsp", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-cdi as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack", "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-cdi" }, "product_reference": "jetty-ee10-cdi", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-fcgi-proxy as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack", "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-fcgi-proxy" }, "product_reference": "jetty-ee10-fcgi-proxy", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-glassfish-jstl as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack", "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-glassfish-jstl" }, "product_reference": "jetty-ee10-glassfish-jstl", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-home as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack", "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-home" }, "product_reference": "jetty-ee10-home", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-jaspi as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack", "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-jaspi" }, "product_reference": "jetty-ee10-jaspi", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-jndi as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack", "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-jndi" }, "product_reference": "jetty-ee10-jndi", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-jspc-maven-plugin as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack", "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-jspc-maven-plugin" }, "product_reference": "jetty-ee10-jspc-maven-plugin", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-maven-plugin as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack", "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-maven-plugin" }, "product_reference": "jetty-ee10-maven-plugin", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-plus as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack", "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-plus" }, "product_reference": "jetty-ee10-plus", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-proxy as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack", "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-proxy" }, "product_reference": "jetty-ee10-proxy", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-quickstart as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack", "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-quickstart" }, "product_reference": "jetty-ee10-quickstart", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-servlet as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack", "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-servlet" }, "product_reference": "jetty-ee10-servlet", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-servlets as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack", "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-servlets" }, "product_reference": "jetty-ee10-servlets", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-webapp as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack", "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-webapp" }, "product_reference": "jetty-ee10-webapp", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack" }, { "category": "default_component_of", "full_product_name": { "name": "devspaces/openvsx-rhel9 as a component of Red Hat OpenShift Dev Spaces", "product_id": "red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9" }, "product_reference": "devspaces/openvsx-rhel9", "relates_to_product_reference": "red_hat_openshift_dev_spaces" }, { "category": "default_component_of", "full_product_name": { "name": "devspaces/pluginregistry-rhel9 as a component of Red Hat OpenShift Dev Spaces", "product_id": "red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9" }, "product_reference": "devspaces/pluginregistry-rhel9", "relates_to_product_reference": "red_hat_openshift_dev_spaces" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-servlet as a component of streams for Apache Kafka 3", "product_id": "streams_for_apache_kafka_3:jetty-ee10-servlet" }, "product_reference": "jetty-ee10-servlet", "relates_to_product_reference": "streams_for_apache_kafka_3" }, { "category": "default_component_of", "full_product_name": { "name": "jetty-ee10-servlets as a component of streams for Apache Kafka 3", "product_id": "streams_for_apache_kafka_3:jetty-ee10-servlets" }, "product_reference": "jetty-ee10-servlets", "relates_to_product_reference": "streams_for_apache_kafka_3" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-5795", "cwe": { "id": "CWE-226", "name": "Sensitive Information in Resource Not Removed Before Reuse" }, "discovery_date": "2026-04-08T14:01:02.911884+00:00", "flags": [ { "label": "component_not_present", "product_ids": [ "red_hat_data_grid_8:jetty-ee10-servlet" ] }, { "label": "vulnerable_code_not_present", "product_ids": [ "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-annotations", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-apache-jsp", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-cdi", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-fcgi-proxy", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-glassfish-jstl", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-home", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-jaspi", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-jndi", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-jspc-maven-plugin", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-maven-plugin", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-plus", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-proxy", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-quickstart", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-servlet", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-servlets", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-webapp", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-annotations", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-apache-jsp", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-cdi", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-fcgi-proxy", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-glassfish-jstl", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-home", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-jaspi", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-jndi", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-jspc-maven-plugin", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-maven-plugin", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-plus", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-proxy", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-quickstart", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-servlet", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-servlets", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-webapp", "streams_for_apache_kafka_3:jetty-ee10-servlets" ] }, { "label": "vulnerable_code_not_in_execute_path", "product_ids": [ "red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9", "red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2456519" } ], "notes": [ { "category": "description", "text": "A flaw was found in Eclipse Jetty. The `JASPIAuthenticator` class is responsible for handling authentication checks. During these checks, the class sets two ThreadLocal variables to store authentication state. Under certain conditions, the authentication process can return early without properly clearing the ThreadLocal variables, allowing a subsequent request to inherit the un-cleared ThreadLocal values. This issue can cause broken access control, authentication bypass, privilege escalation and data breaches.", "title": "Vulnerability description" }, { "category": "summary", "text": "org.eclipse.jetty.ee10/jetty-ee10: early return from the JASPIAuthenticator class without clearing ThreadLocal variables", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is only exploitable when `JASPIAuthenticator` class returns early and a subsequent request inherits the un-cleared ThreadLocal values. This requires a new request to be assigned the exact same recycled thread, increasing the complexity of exploitation. Due to these reasons, this flaw has been rated with an important severity.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "HawtIO HawtIO 4.4.0", "Red Hat Offline Knowledge Portal 1.2.10:registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:9620b543dab8aa6e7a2f372890512c885c4beb6098d61fc5dd68e15cb0e2cc22_arm64", "Red Hat Offline Knowledge Portal 1.2.10:registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:c0b2c8c0cf4ff8340aef1ce4e92fbf0dee4fc0b88a0c17659ad018f2fc21513a_amd64", "Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14" ], "known_affected": [ "streams_for_apache_kafka_3:jetty-ee10-servlet" ], "known_not_affected": [ "red_hat_data_grid_8:jetty-ee10-servlet", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-annotations", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-apache-jsp", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-cdi", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-fcgi-proxy", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-glassfish-jstl", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-home", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-jaspi", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-jndi", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-jspc-maven-plugin", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-maven-plugin", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-plus", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-proxy", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-quickstart", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-servlet", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-servlets", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-webapp", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-annotations", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-apache-jsp", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-cdi", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-fcgi-proxy", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-glassfish-jstl", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-home", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-jaspi", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-jndi", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-jspc-maven-plugin", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-maven-plugin", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-plus", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-proxy", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-quickstart", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-servlet", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-servlets", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-webapp", "red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9", "red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9", "streams_for_apache_kafka_3:jetty-ee10-servlets" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-5795" }, { "category": "external", "summary": "RHBZ#2456519", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456519" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-5795", "url": "https://www.cve.org/CVERecord?id=CVE-2026-5795" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5795", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5795" }, { "category": "external", "summary": "https://github.com/advisories/GHSA-gc59-r5jq-98qw", "url": "https://github.com/advisories/GHSA-gc59-r5jq-98qw" } ], "release_date": "2026-04-08T13:32:28.935000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-06-10T15:39:02+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "HawtIO HawtIO 4.4.0" ], "url": "https://access.redhat.com/errata/RHSA-2026:25089" }, { "category": "vendor_fix", "date": "2026-06-23T21:53:14+00:00", "details": "The container image provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command.", "product_ids": [ "Red Hat Offline Knowledge Portal 1.2.10:registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:9620b543dab8aa6e7a2f372890512c885c4beb6098d61fc5dd68e15cb0e2cc22_arm64", "Red Hat Offline Knowledge Portal 1.2.10:registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:c0b2c8c0cf4ff8340aef1ce4e92fbf0dee4fc0b88a0c17659ad018f2fc21513a_amd64" ], "url": "https://access.redhat.com/errata/RHSA-2026:28573" }, { "category": "vendor_fix", "date": "2026-05-14T16:55:24+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14" ], "url": "https://access.redhat.com/errata/RHSA-2026:17668" }, { "category": "workaround", "details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.", "product_ids": [ "HawtIO HawtIO 4.4.0", "Red Hat Offline Knowledge Portal 1.2.10:registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:9620b543dab8aa6e7a2f372890512c885c4beb6098d61fc5dd68e15cb0e2cc22_arm64", "Red Hat Offline Knowledge Portal 1.2.10:registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:c0b2c8c0cf4ff8340aef1ce4e92fbf0dee4fc0b88a0c17659ad018f2fc21513a_amd64", "Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14", "streams_for_apache_kafka_3:jetty-ee10-servlet" ] }, { "category": "no_fix_planned", "details": "Will not fix", "product_ids": [ "streams_for_apache_kafka_3:jetty-ee10-servlet" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "HawtIO HawtIO 4.4.0", "Red Hat Offline Knowledge Portal 1.2.10:registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:9620b543dab8aa6e7a2f372890512c885c4beb6098d61fc5dd68e15cb0e2cc22_arm64", "Red Hat Offline Knowledge Portal 1.2.10:registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:c0b2c8c0cf4ff8340aef1ce4e92fbf0dee4fc0b88a0c17659ad018f2fc21513a_amd64", "Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14", "red_hat_data_grid_8:jetty-ee10-servlet", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-annotations", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-apache-jsp", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-cdi", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-fcgi-proxy", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-glassfish-jstl", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-home", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-jaspi", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-jndi", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-jspc-maven-plugin", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-maven-plugin", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-plus", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-proxy", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-quickstart", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-servlet", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-servlets", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-webapp", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-annotations", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-apache-jsp", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-cdi", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-fcgi-proxy", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-glassfish-jstl", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-home", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-jaspi", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-jndi", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-jspc-maven-plugin", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-maven-plugin", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-plus", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-proxy", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-quickstart", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-servlet", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-servlets", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-webapp", "red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9", "red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9", "streams_for_apache_kafka_3:jetty-ee10-servlet", "streams_for_apache_kafka_3:jetty-ee10-servlets" ] } ], "threats": [ { "category": "impact", "details": "Important", "product_ids": [ "HawtIO HawtIO 4.4.0", "Red Hat Offline Knowledge Portal 1.2.10:registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:9620b543dab8aa6e7a2f372890512c885c4beb6098d61fc5dd68e15cb0e2cc22_arm64", "Red Hat Offline Knowledge Portal 1.2.10:registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:c0b2c8c0cf4ff8340aef1ce4e92fbf0dee4fc0b88a0c17659ad018f2fc21513a_amd64", "Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14", "red_hat_data_grid_8:jetty-ee10-servlet", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-annotations", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-apache-jsp", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-cdi", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-fcgi-proxy", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-glassfish-jstl", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-home", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-jaspi", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-jndi", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-jspc-maven-plugin", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-maven-plugin", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-plus", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-proxy", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-quickstart", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-servlet", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-servlets", "red_hat_jboss_enterprise_application_platform_8:jetty-ee10-webapp", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-annotations", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-apache-jsp", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-cdi", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-fcgi-proxy", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-glassfish-jstl", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-home", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-jaspi", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-jndi", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-jspc-maven-plugin", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-maven-plugin", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-plus", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-proxy", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-quickstart", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-servlet", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-servlets", "red_hat_jboss_enterprise_application_platform_expansion_pack:jetty-ee10-webapp", "red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9", "red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9", "streams_for_apache_kafka_3:jetty-ee10-servlet", "streams_for_apache_kafka_3:jetty-ee10-servlets" ] } ], "title": "org.eclipse.jetty.ee10/jetty-ee10: early return from the JASPIAuthenticator class without clearing ThreadLocal variables" } ] }