# UNDF: UNDF-2026-000000126
## Jetty — CWE-407 scan result: CLEAN (beyond jetty-0001)

Files scanned:
- `jetty-core/jetty-server/src/main/java/org/eclipse/jetty/server/HttpChannel.java` — interface definition only, no executable loop logic
- `jetty-core/jetty-server/src/main/java/org/eclipse/jetty/server/handler/PathMappingsHandler.java` — `getDescendants().contains()` in `addMapping()` is configuration-time only, not per-request

No new CWE-407 defects found beyond jetty-0001.