https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-12383.htmlhttps://patchthecve.com/cve/CVE-2025-12383.htmlSun, 18 Oct 2026 20:10:00 +0000HIGH 7.4: In Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 a race condition can cause ignoring of critical SSL configurations - such as mutual authentication, custom key/trust stores, and other security settings. This issue may result in SSLHandshakeException under normal circumstances, but under certain condithttps://patchthecve.com/cve/CVE-2021-28168.htmlhttps://patchthecve.com/cve/CVE-2021-28168.htmlWed, 17 Jun 2026 03:45:56 +0000MEDIUM 6.2: Eclipse Jersey 2.28 to 2.33 and Eclipse Jersey 3.0.0 to 3.0.1 contains a local information disclosure vulnerability. This is due to the use of the File.createTempFile which creates a file inside of the system temporary directory with the permissions: -rw-r--r--. Thus the contents of this file are vihttps://patchthecve.com/cve/CVE-2014-3643.htmlhttps://patchthecve.com/cve/CVE-2014-3643.htmlWed, 17 Jun 2026 00:08:40 +0000HIGH 7.5: jersey: XXE via parameter entities not disabled by the jersey SAX parser