Threats tagged 'cleanstart-2026-nf51702'

A security vulnerability in the Rundeck package affects Eclipse Jetty components including jetty-security, jetty-eeN-security, and jetty-eeN-servlet. The issue allows bypassing Jakarta Spec constraints defined as http-method-omission by using substrings of the defined HTTP methods. This could lead to unintended access control bypass. The vulnerability is fixed in Rundeck version 6.0.1-r11.