CLEANSTART-2026-VW73412: When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required)

Q: Which deployment should be investigated for this issue?

The affected software is identified as cleanstart/solr.

Q: Does the available advisory data identify affected or fixed versions?

No affected version range or fixed version is provided in the available data.

Q: Is a mitigation or workaround provided for environments that cannot patch immediately?

No mitigation or workaround is included in the available data.

Published Nov 8, 2026

Updated

Security vulnerability affects the solr package. When Jetty's HttpClient make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required).

Affected Software

1 affected componentFixes available

cleanstart/solr<10.1.0-r0

10.1.0-r0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/solr to a version that resolves this vulnerability.
Fixed in 10.1.0-r0

Event History

Nov 8, 2026

Advisory Published

via OSV·12:37 AM

Data Sourced

via OSV·12:37 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-77711

Frequently Asked Questions

Which deployment should be investigated for this issue?

The affected software is identified as cleanstart/solr.

Does the available advisory data identify affected or fixed versions?

No affected version range or fixed version is provided in the available data.

Is a mitigation or workaround provided for environments that cannot patch immediately?

No mitigation or workaround is included in the available data.

CLEANSTART-2026-VW73412: When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required)

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which deployment should be investigated for this issue?

Does the available advisory data identify affected or fixed versions?

Is a mitigation or workaround provided for environments that cannot patch immediately?

Company

Resources

Contact

Frequently Asked Questions

Which deployment should be investigated for this issue?

Does the available advisory data identify affected or fixed versions?

Is a mitigation or workaround provided for environments that cannot patch immediately?