HeroDevs
Visit Jetty Home Page

Jetty 11.0.x Release Notes

5 versions

Comprehensive release notes and changelog for Jetty 11.0.x, including security patches, bug fixes, and feature updates across all supported versions.

Jul 15, 2026
Latest: 11.0.31
16 Patched Vulnerabilities
VEX Statements

July 2026

11.0.31

Released Jul 15, 2026
CVE-2026-10050
Full Version: 
11.0.31

Security Fixes

  • Digest Authentication bypass via ISO-8859-1 character encoding collision (CVE-2026-10050).

Notes

  • This release originates from the open-source Eclipse Jetty by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Jetty 11.0.26.

11.0.30

Released Jul 15, 2026
CVE-2026-6790
Full Version: 
11.0.30

Security Fixes

  • Missing validation of HTTP request authority against the Host header, potentially leading to incorrect URI construction and virtual host selection (CVE-2026-6790).

Notes

  • This release originates from the open-source Eclipse Jetty by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Jetty 11.0.26.

April 2026

11.0.29

Released Apr 10, 2026
CVE-2026-5795
CVE-2026-2332
Full Version: 
11.0.29

Security Fixes

  • JASPI access control escalation (CVE-2026-5795).
  • HTTP Request Smuggling via Chunked Extension Quoted-String Parsing (CVE-2026-2332).

Notes

  • This release originates from the open-source Eclipse Jetty by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Jetty 11.0.26.

March 2026

11.0.28

Released Mar 6, 2026
CVE-2026-2332
Full Version: 
11.0.28

Security Fixes

  • HTTP Request Smuggling via Chunked Extension Quoted-String Parsing (CVE-2026-2332). (Resolved in 11.0.29)

Notes

  • This release originates from the open-source Eclipse Jetty by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Jetty 11.0.26.

11.0.27

Released Mar 5, 2026
Full Version: 
11.0.27

Notes

  • This release originates from the open-source Eclipse Jetty by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Jetty 11.0.26.

Stay in the loop

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.