Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variables
An unauthenticated user may gain ungrated privileges from a previous request (privilege escalation).
Advisories for Maven/Org.eclipse.jetty.ee11/Jetty-Ee11-Jaspi package
2026