CLEANSTART-2026-IH10038: In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the request path in context
Published Nov 7, 2026
·Updated
Security vulnerability affects the kafka package. In Eclipse Jetty, TryPathsHandler and TryFilesFilter can be configured to forward requests to template URIs such as index?p=$path, where $path is the request path in context.
Affected Software
1 affected componentFixes available
cleanstart/kafka<4.1.2-r6
4.1.2-r6
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/kafkato a version that resolves this vulnerability.Fixed in 4.1.2-r6
Event History
Nov 7, 2026
Advisory Published
via OSV·12:38 AM
Data Sourced
via OSV·12:38 AM
DescriptionSeverityAffected Software