Issues

New issue

EOL (End of Life) for Eclipse Jetty 9, 10, 11 and CometD 5, 6, 7 - Update (Oct, 2025)
#13918 · jmcc0nn3ll opened on Oct 28, 2025
1

Rework keys and certificates sharing with Quiche
jetty/jetty.project#15931 · opened on Oct 5, 2026
SessionHandler.SessionRequest.getSession(true) returns null after the session was invalidated in the same request
jetty/jetty.project#15929 · opened on Oct 3, 2026
2
ResourceHandler eagerly consumes OPTIONS requests starting in release 12.1
jetty/jetty.project#15895 · opened on Oct 2, 2026
2
Jetty Release Checklist 12.0.40
jetty/jetty.project#15894 · opened on Oct 2, 2026
Jetty Release Checklist 12.1.14
jetty/jetty.project#15892 · opened on Oct 2, 2026
EagerContentHandler swallows Callback.failed(), leaving QoSHandler permits occupied
jetty/jetty.project#15888 · opened on Sep 30, 2026
Missing dep when I try to use the session-store-infinispan-remote module
jetty/jetty.project#15887 · opened on Sep 30, 2026
Review EE10+ DefaultServlet's 405 Method Not Allowed response when POST method is used
jetty/jetty.project#15883 · opened on Sep 30, 2026
HTTP/2: blocked ServletInputStream.read() never woken after PROTOCOL_ERROR reset for invalid data length
jetty/jetty.project#15878 · opened on Sep 29, 2026
2
HTTP/2 allocates maximum-sized HPACK output buffers for small response headers
jetty/jetty.project#15872 · opened on Sep 27, 2026
3
Support opaque or dynamically changing X509ExtendedKeyManager aliases with SNI selection
jetty/jetty.project#15858 · opened on Sep 25, 2026
jakarta.servlet.ServletContextListener.contextDestroyed(ServletContextEvent sce) is unable to be used to destroy/invalidate past Sessions.
jetty/jetty.project#15854 · opened on Sep 23, 2026
8
Experimental Permissions-Policy response header fails to parse structured header value as list (results in BAD_QUOTES_IN_TOKEN)
jetty/jetty.project#15853 · opened on Sep 23, 2026
3
Rework URI path encoding
jetty/jetty.project#15851 · opened on Sep 23, 2026
WebSocket listener dispatch is reflection-only and breaks silently in GraalVM native images (Session$Listener lookup + MessageSink findConstructor)
jetty/jetty.project#15850 · opened on Sep 23, 2026
ErrorPageErrorHandler does not resolve configured 403 error page for authorization failures
jetty/jetty.project#15809 · opened on Sep 17, 2026
Reparsing cookie loses Max-Age/Expire attributes
jetty/jetty.project#15802 · opened on Sep 15, 2026
4
Rework jetty-home lib directory to isolate environment specific libs
Feature
jetty/jetty.project#15761 · opened on Sep 9, 2026
1
Positive Max-Age does not take precedence over an expired Expires attribute
jetty/jetty.project#15760 · opened on Sep 9, 2026
6
GzipResponseAndCallback.commit() NPE on null HttpField array entry with Spring MVC ResponseBodyEmitter (12.0.34)
jetty/jetty.project#15732 · opened on Sep 5, 2026
3
HttpCookieUtils ignores expires attribute
jetty/jetty.project#15718 · opened on Sep 3, 2026
2
Mortbay Apache JSP 10.0.x is EOL
jetty/jetty.project#15672 · opened on Aug 26, 2026
1
Flaky Test: HttpClientStreamTest.testDownloadWithFailure
jetty/jetty.project#15667 · opened on Aug 26, 2026
1
HTTP/2: closed tunnel streams aren't deregistered from the session
jetty/jetty.project#15657 · opened on Aug 24, 2026
Increased memory allocations for HTTP/2 writes in Jetty 12.1
jetty/jetty.project#15627 · opened on Aug 20, 2026
7

Navigation Menu

Issues

Issues

Rework keys and certificates sharing with Quiche

SessionHandler.SessionRequest.getSession(true) returns null after the session was invalidated in the same request

ResourceHandler eagerly consumes OPTIONS requests starting in release 12.1

Jetty Release Checklist 12.0.40

Jetty Release Checklist 12.1.14

EagerContentHandler swallows Callback.failed(), leaving QoSHandler permits occupied

Missing dep when I try to use the session-store-infinispan-remote module

Review EE10+ `DefaultServlet`'s 405 Method Not Allowed response when POST method is used

HTTP/2: blocked `ServletInputStream.read()` never woken after `PROTOCOL_ERROR` reset for invalid data length

HTTP/2 allocates maximum-sized HPACK output buffers for small response headers

Support opaque or dynamically changing X509ExtendedKeyManager aliases with SNI selection

`jakarta.servlet.ServletContextListener.contextDestroyed(ServletContextEvent sce)` is unable to be used to destroy/invalidate past Sessions.

Experimental `Permissions-Policy` response header fails to parse structured header value as list (results in BAD_QUOTES_IN_TOKEN)

Rework URI path encoding

WebSocket listener dispatch is reflection-only and breaks silently in GraalVM native images (Session$Listener lookup + MessageSink findConstructor)

ErrorPageErrorHandler does not resolve configured 403 error page for authorization failures

Reparsing cookie loses Max-Age/Expire attributes

Rework jetty-home lib directory to isolate environment specific libs

Positive Max-Age does not take precedence over an expired Expires attribute

GzipResponseAndCallback.commit() NPE on null HttpField array entry with Spring MVC ResponseBodyEmitter (12.0.34)

`HttpCookieUtils` ignores `expires` attribute

Mortbay Apache JSP 10.0.x is EOL

Flaky Test: HttpClientStreamTest.testDownloadWithFailure

HTTP/2: closed tunnel streams aren't deregistered from the session

Increased memory allocations for HTTP/2 writes in Jetty 12.1