Jersey 2.x: Updating Jetty to 12.0.12

[stecurran-est-tech]

Hi, I am investigating whether it is possible to upgrade jetty-http to version 12.0.12, as this release resolves CVE-2024-6763.
Jetty 12 provides separate EE8, EE9, and EE10 application environments. The EE8 environment retains the legacy javax.* APIs, so namespace compatibility with Jersey 2.x should not be impacted. Jersey 2.47 already supports Java 17, so updating the runtime to Java 17 is possible.
I realise that there are other breaking changes (removal of deprecated features, HttpClient/HttpFields API updates, Maven artefact renaming) in Jetty 12 which would need to be addressed during the upgrade.
Has this been attempted previously or can anyone provide opinion on whether such a Jetty upgrade would be possible?

[senivam]

There was already discussion on it, and due to requirements (Jetty JDK vs Jersey JDK), it seems impossible. Jetty 12 appears only in 3.1.x versions of Jersey.

[stecurran-est-tech]

Thanks @senivam