Eclipse Foundation org.eclipse.jetty.ee8:jetty-ee8-security

• CVE-2026-18659 Medium 6.9 Unauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substring 0.4%
• CVE-2026-18662 Medium 6.9 In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, two or more security constraints with the same http-method-omission set, and no url-patterns, are not combined 0.4%