6.5
CVSS V3
Status
Impact
This is a vulnerability in jetty, which is a transitive dependency brought in as a part of dropwizard. Dropwizard has numerous major version updates available (no updated minor versions on this major version), and therefore this requires a fix from upstream maintainers as updating Dropwizard would lead to numerous breaking changes.
Status