{"schemaVersion":3,"id":"CVE-2026-19203","aliases":["UBUNTU-CVE-2026-19203","DEBIAN-CVE-2026-19203","CGA-9r6q-2cwx-hm8j","CGA-jxqg-pqw9-q63w","CGA-45f2-r2g4-hm4p","CGA-798r-9chq-q8rm","CGA-7q29-8vhp-537p","CGA-fg9g-84fh-3q59","CGA-w75m-hp72-7q4h","CGA-wfqx-5fc8-mvp8","CGA-2qv6-x3h3-xf7r","CGA-4qc3-8q6f-8j4v","CGA-4rcg-qm75-4xv4","CGA-62wf-6rmm-x9c7","CGA-6j43-vcpm-4pfw","CGA-7p94-8qfh-8jqv","CGA-8jwf-2rvx-x647","CGA-fg7c-v8j9-jr7q","CGA-jvfc-mxjf-hv3h","CGA-m36f-rw26-cgwr","CGA-m6v9-pjq7-fxw3","CGA-mc6c-r9vg-jm36","CGA-pf4j-qpxr-4xxv","CGA-q69c-cjw8-f74h","CGA-wxhf-2f4m-8cwv","CGA-x7cq-mq6q-p6cm","CGA-23mp-p3wr-f6fv","CGA-27mh-ghc7-xq8x","CGA-3756-x7g7-qr35","CGA-3pv7-hwpq-pgqw","CGA-52pv-pxxr-wpcq","CGA-6h42-598g-j6wr","CGA-7hjx-j3r2-3mp7","CGA-7j7w-6hjx-v2gr","CGA-7xmw-mvqv-h22r","CGA-844r-qhjh-hm4j","CGA-8r3j-ghv9-gw2g","CGA-8rp5-m6qm-h945","CGA-8xp9-pvjj-pw86","CGA-9q9h-9vxw-wq3q","CGA-cg7q-pg2r-ww75","CGA-f2m5-f7g7-2r4f","CGA-h8jj-xcwc-2phc","CGA-hrpv-2x2x-cq65","CGA-j3fx-qf4r-47xr","CGA-jx2v-wv39-v37r","CGA-m2xx-mg45-8vhc","CGA-m87m-446g-86hj","CGA-p443-cg84-qgjm","CGA-pg5m-3q3q-fwh3","CGA-q4pr-ggw2-4rrp","CGA-r2g7-rqxp-w9m7","CGA-rfj9-xm46-59cj","CGA-x7vr-xcm4-j7gc","CGA-x827-q337-5g7f","CGA-x8mc-p449-mmm5","CGA-xcg4-r3h2-fqmw","CGA-xmm5-jj7g-h3rf"],"status":"published","duplicateOf":null,"title":null,"description":"A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request boundaries, potentially resulting in HTTP request smuggling.\n\n\n\n\nThis is caused by Jetty accepting a lone LF character as a terminator in parts of chunked request parsing. Depending on the Jetty version and configured HTTP compliance mode, this may occur in chunk extensions, chunk data termination, or trailer termination.","dates":{"published":"2026-09-08T12:08:37.576Z","modified":"2026-09-08T14:21:55.816Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.3,"severity":"high","version":"4.0","versionLabel":"v4.0","source":"CVE.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":8.3,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Ubuntu","score":8.3,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Debian","score":8.3,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":8.3,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Wolfi","score":8.3,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":8.3,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true}]},"epss":{"probability":0.00306,"percentile":0.21963,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.01699999999999996,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00289},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00289,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00289,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00289,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00289,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00289,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00289,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00289,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00289,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00289,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00289,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00306,"percentile":0.21963}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00289,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00289,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00289,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00289,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00306,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00306,"percentile":0.21963}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-444","name":"Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')","description":"The product acts as an intermediary HTTP agent\n         (such as a proxy or firewall) in the data flow between two\n         entities such as a client and server, but it does not\n         interpret malformed HTTP requests or responses in ways that\n         are consistent with how the messages will be processed by\n         those entities that are at the ultimate destination.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/444.html"}],"affected":[{"vendor":"chainguard","product":"cruise-control-fips-jars","name":"cruise-control-fips-jars","label":"cruise-control-fips-jars","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cruise-control-fips-jars","purlType":"apk","versions":[{"text":"< 2.5.146-r9","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 2.5.146-r9 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"cruise-control-jars","name":"cruise-control-jars","label":"cruise-control-jars","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cruise-control-jars","purlType":"apk","versions":[{"text":"< 2.5.146-r9","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 2.5.146-r9 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kafka-3.7","name":"kafka-3.7","label":"kafka-3.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kafka-3.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kafka-3.8","name":"kafka-3.8","label":"kafka-3.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kafka-3.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kafka-3.9","name":"kafka-3.9","label":"kafka-3.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kafka-3.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kafka-4.0","name":"kafka-4.0","label":"kafka-4.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kafka-4.0","purlType":"apk","versions":[{"text":"< 4.0.2-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.2-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kafka-4.1","name":"kafka-4.1","label":"kafka-4.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kafka-4.1","purlType":"apk","versions":[{"text":"< 4.1.2-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.2-r13","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kafka-4.2","name":"kafka-4.2","label":"kafka-4.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kafka-4.2","purlType":"apk","versions":[{"text":"< 4.2.2-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.2-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kafka-4.3-openjdk-17","name":"kafka-4.3-openjdk-17","label":"kafka-4.3-openjdk-17","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kafka-4.3-openjdk-17","purlType":"apk","versions":[{"text":"< 4.3.1-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1-r13","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kafka-4.3-openjdk-21","name":"kafka-4.3-openjdk-21","label":"kafka-4.3-openjdk-21","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kafka-4.3-openjdk-21","purlType":"apk","versions":[{"text":"< 4.3.1-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1-r13","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kafka-4.3-openjdk-25","name":"kafka-4.3-openjdk-25","label":"kafka-4.3-openjdk-25","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kafka-4.3-openjdk-25","purlType":"apk","versions":[{"text":"< 4.3.1-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1-r13","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kafka-fips-4.1","name":"kafka-fips-4.1","label":"kafka-fips-4.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kafka-fips-4.1","purlType":"apk","versions":[{"text":"< 4.1.2-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.2-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kafka-fips-4.2","name":"kafka-fips-4.2","label":"kafka-fips-4.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kafka-fips-4.2","purlType":"apk","versions":[{"text":"< 4.2.2-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.2-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kafka-fips-4.3","name":"kafka-fips-4.3","label":"kafka-fips-4.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kafka-fips-4.3","purlType":"apk","versions":[{"text":"< 4.3.1-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-cluster-operator","name":"strimzi-kafka-operator-cluster-operator","label":"strimzi-kafka-operator-cluster-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-cluster-operator","purlType":"apk","versions":[{"text":"< 1.2.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-fips-cluster-operator","name":"strimzi-kafka-operator-fips-cluster-operator","label":"strimzi-kafka-operator-fips-cluster-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-fips-cluster-operator","purlType":"apk","versions":[{"text":"< 1.2.0-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-fips-kafka-agent","name":"strimzi-kafka-operator-fips-kafka-agent","label":"strimzi-kafka-operator-fips-kafka-agent","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-fips-kafka-agent","purlType":"apk","versions":[{"text":"< 1.2.0-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-fips-kafka-init","name":"strimzi-kafka-operator-fips-kafka-init","label":"strimzi-kafka-operator-fips-kafka-init","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-fips-kafka-init","purlType":"apk","versions":[{"text":"< 1.2.0-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-fips-kafka-thirdparty-libs-cc","name":"strimzi-kafka-operator-fips-kafka-thirdparty-libs-cc","label":"strimzi-kafka-operator-fips-kafka-thirdparty-libs-cc","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-fips-kafka-thirdparty-libs-cc","purlType":"apk","versions":[{"text":"< 1.2.0-r9","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 1.2.0-r9 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-fips-topic-operator","name":"strimzi-kafka-operator-fips-topic-operator","label":"strimzi-kafka-operator-fips-topic-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-fips-topic-operator","purlType":"apk","versions":[{"text":"< 1.2.0-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-fips-tracing-agent","name":"strimzi-kafka-operator-fips-tracing-agent","label":"strimzi-kafka-operator-fips-tracing-agent","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-fips-tracing-agent","purlType":"apk","versions":[{"text":"< 1.2.0-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-fips-user-operator","name":"strimzi-kafka-operator-fips-user-operator","label":"strimzi-kafka-operator-fips-user-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-fips-user-operator","purlType":"apk","versions":[{"text":"< 1.2.0-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-kafka-agent","name":"strimzi-kafka-operator-kafka-agent","label":"strimzi-kafka-operator-kafka-agent","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-agent","purlType":"apk","versions":[{"text":"< 1.2.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-kafka-init","name":"strimzi-kafka-operator-kafka-init","label":"strimzi-kafka-operator-kafka-init","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-init","purlType":"apk","versions":[{"text":"< 1.2.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","name":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","label":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-thirdparty-libs-cc","purlType":"apk","versions":[{"text":"< 1.2.0-r11","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 1.2.0-r11 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-topic-operator","name":"strimzi-kafka-operator-topic-operator","label":"strimzi-kafka-operator-topic-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-topic-operator","purlType":"apk","versions":[{"text":"< 1.2.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-tracing-agent","name":"strimzi-kafka-operator-tracing-agent","label":"strimzi-kafka-operator-tracing-agent","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-tracing-agent","purlType":"apk","versions":[{"text":"< 1.2.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-user-operator","name":"strimzi-kafka-operator-user-operator","label":"strimzi-kafka-operator-user-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-user-operator","purlType":"apk","versions":[{"text":"< 1.2.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r11","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kafka-4.1","name":"kafka-4.1","label":"kafka-4.1","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kafka-4.1","purlType":"apk","versions":[{"text":"< 4.1.2-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.2-r13","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kafka-4.2","name":"kafka-4.2","label":"kafka-4.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kafka-4.2","purlType":"apk","versions":[{"text":"< 4.2.2-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.2-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-cluster-operator","name":"strimzi-kafka-operator-cluster-operator","label":"strimzi-kafka-operator-cluster-operator","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-cluster-operator","purlType":"apk","versions":[{"text":"< 1.2.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r11","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-kafka-agent","name":"strimzi-kafka-operator-kafka-agent","label":"strimzi-kafka-operator-kafka-agent","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-agent","purlType":"apk","versions":[{"text":"< 1.2.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r11","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-kafka-init","name":"strimzi-kafka-operator-kafka-init","label":"strimzi-kafka-operator-kafka-init","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-init","purlType":"apk","versions":[{"text":"< 1.2.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r11","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","name":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","label":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-thirdparty-libs-cc","purlType":"apk","versions":[{"text":"< 1.2.0-r11","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 1.2.0-r11 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-topic-operator","name":"strimzi-kafka-operator-topic-operator","label":"strimzi-kafka-operator-topic-operator","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-topic-operator","purlType":"apk","versions":[{"text":"< 1.2.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r11","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-tracing-agent","name":"strimzi-kafka-operator-tracing-agent","label":"strimzi-kafka-operator-tracing-agent","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-tracing-agent","purlType":"apk","versions":[{"text":"< 1.2.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r11","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-user-operator","name":"strimzi-kafka-operator-user-operator","label":"strimzi-kafka-operator-user-operator","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-user-operator","purlType":"apk","versions":[{"text":"< 1.2.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r11","eol":null,"hubHref":null},{"vendor":"debian","product":"jetty12","name":"jetty12","label":"jetty12","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/jetty12","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"jetty9","name":"jetty9","label":"jetty9","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/jetty9","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"jetty","name":"jetty","label":"jetty","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/jetty","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"jetty12","name":"jetty12","label":"jetty12","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/jetty12","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"jetty9","name":"jetty9","label":"jetty9","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/jetty9","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"eclipse foundation","product":"eclipse jetty","name":"Eclipse Jetty","label":"eclipse jetty","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 12.1.0, ≤ 12.1.11","noFixRecorded":false,"fixedIn":null},{"text":"≥ 12.0.0, ≤ 12.0.37","noFixRecorded":false,"fixedIn":null},{"text":"≥ 11.0.0, ≤ 11.0.31","noFixRecorded":false,"fixedIn":null},{"text":"≥ 10.0.0, ≤ 10.0.31","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.4.0, ≤ 9.4.63","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 12.1.0, ≤ 12.1.11 | ≥ 12.0.0, ≤ 12.0.37 | ≥ 11.0.0, ≤ 11.0.31 | ≥ 10.0.0, ≤ 10.0.31 | ≥ 9.4.0, ≤ 9.4.63","eol":null,"hubHref":"/vendor/eclipse_foundation/eclipse_jetty"}],"affectedCount":43,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-xc35-c22g-239h","label":"github.com/jetty/jetty.project/security/advisories/GHSA-xc35-c22g-239h","hostname":"github.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-19203","label":"ubuntu.com/security/CVE-2026-19203","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-19203","label":"www.cve.org/CVERecord?id=CVE-2026-19203","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-19203","label":"security-tracker.debian.org/tracker/CVE-2026-19203","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19203.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19203.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19203","label":"nvd.nist.gov/vuln/detail/CVE-2026-19203","hostname":"nvd.nist.gov","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-09-08T12:08:37.576Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-08T14:21:55.816Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":33,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T23:48:49.429Z","stale":false,"partial":false}}