Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variables
An unauthenticated user may gain ungrated privileges from a previous request (privilege escalation).
Advisories for Maven/Org.eclipse.jetty/Jetty-Jaspi package
2026