Vulnerability in Eclipse Foundation Jetty
CVE-2026-10050
In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be I…
Affected products
- Eclipse Foundation Jetty — versions 9.4.0, 10.0.0, 11.0.0
- Eclipse Foundation Jetty - Ee8 — versions 12.0.0, 12.1.0
- Eclipse Foundation Jetty - Ee9 — versions 12.0.0, 12.1.0