Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variables
An unauthenticated user may gain ungrated privileges from a previous request (privilege escalation).
Advisories for Maven/Org.eclipse.jetty.ee10/Jetty-Ee10-Jaspi package
2026