Jetty versions supported - fix vulnerabilities

[wheestermans31]

Jetty Version

Jetty 9.4
Jetty 10
Jetty 11

Question

If we have projects still using one of the above versions, do they need to move now to Jetty 12, or does these still receive vulnerability fixes.

What is, if needed, the easiest way of working to migrate:

9.4 --> jetty 12
10 --> jetty 12
11 --> jetty 12

[jmcc0nn3ll]

@wheestermans31 Please see the pinned issue here: #13918, where this is explained in more detail. I also wrote a blog a while back.

Briefly, for others that come across this issue: yes, EOL releases are still supported by the Jetty developers at Webtide and through their partners Herodevs and Tuxcare. Older versions of Jetty will be supported indefinitely through these paid support channels.

As for migration, Jetty 12.1 is the recommended target if you require updated CVE support while relying on the open-source project. Moving forward, the Jetty project will support the current and previous releases (12.1 and 12.0 at the time of this response). Once Jetty 13.0 releases with the latest specification update from Jakarta EE, support for Jetty 12.0 will fall back to EOL support options.

[joakime]

Jetty Version

Jetty 9.4
Jetty 10
Jetty 11

Question

If we have projects still using one of the above versions, do they need to move now to Jetty 12, or does these still receive vulnerability fixes.

For these older EOL versions of Jetty, see

• EOL (End of Life) for Eclipse Jetty 9, 10, 11 and CometD 5, 6, 7 - Update (Oct, 2025) #13984

What is, if needed, the easiest way of working to migrate:

9.4 --> jetty 12
10 --> jetty 12
11 --> jetty 12

Note: https://jetty.org/docs/jetty/12.1/index.html

If you want to migrate to Jetty 12, and maintain the EE level for each migration you can use the appropriate environment on Jetty 12 that best matches your webapp.

Jetty EOL version	Jakarta Namespace	Jetty 12 EE Spec	Jetty 12 Servlet Spec	Jetty 12 Environment
9.4.x	javax.servlet	EE8	Servlet 4.0	ee8 environment
10.x	jakarta.servlet	EE9	Servlet 5.0	ee9 environment
11.x	jakarta.servlet	EE10	Servlet 6.0	ee10 environment