[JOC-2227] Update Jetty from 11.0.20 to 11.0.26 due to vulnerability CVE-2025-5115 - SOS JIRA

XML

Word

Printable

Details

Type: Fix
Status: Released (View Workflow)
Priority: Major
Resolution: Fixed
Affects Version/s: 2.7.0, 2.8.0
Fix Version/s: 2.7.9, 2.8.4
Component/s: JOC Cockpit Web Service
Labels:
None

Description

Current Situation

Currently JS7 JOC Cockpit ships with Eclipse Jetty 11.0.20. This version is flagged with vulnerability CVE-2026-5115.

We rate the impact of this vulnerability being high.
Description: https://nvd.nist.gov/vuln/detail/CVE-2025-5115
Find the technical explanation from the Eclipse Jetty team: https://github.com/advisories/GHSA-mmxm-8w33-wc4h

Desired Behavior

Upgrade Jetty to version 11.0.26 that resolves the isssue.

Attachments

Activity

People

Assignee:: Oliver Haufe

Reporter:: Andreas Püschel

Approver:: Karuna Pawar

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Created:: 12 May 2026 12:22

Updated:: 17 July 2026 14:52

Resolved:: 01 June 2026 11:03