Current Jetty's version 11.0.23 has a known vulnerability, as shown in maven repository https://mvnrepository.com/artifact/org.eclipse.jetty/jetty-server/11.0.23, can be fixed by bumping to 11.0.24 or > 12.0.9.