java-topology/defects/jetty/patch/jetty-CLEAN.md

UNDF: UNDF-2026-000000126

Jetty — CWE-407 scan result: CLEAN (beyond jetty-0001)

Files scanned:

• jetty-core/jetty-server/src/main/java/org/eclipse/jetty/server/HttpChannel.java — interface definition only, no executable loop logic
• jetty-core/jetty-server/src/main/java/org/eclipse/jetty/server/handler/PathMappingsHandler.java — getDescendants().contains() in addMapping() is configuration-time only, not per-request

No new CWE-407 defects found beyond jetty-0001.