Update dependency org.eclipse.jetty:jetty-server to v11.0.24

[dai-chen]

Description

This PR contains the following updates:

Package	Type	Update	Change
org.eclipse.jetty:jetty-server (source)	dependencies	major	11.0.19 -> 11.0.24

Issues Resolved

By merging this PR, the issue #133 will be automatically resolved and closed:

Severity	CVSS Score	CVE
Medium	5.9	CVE-2024-8184
Low	3.7	CVE-2024-6763
Low	3.7	CVE-2024-6763

Check List

• New functionality includes testing.
  • All tests pass, including unit test, integration test and doctest
• New functionality has been documented.
  • New functionality has javadoc added
  • New functionality has user manual doc added
• Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

[dai-chen]

CI failed with JDK 11. Jetty server v12 requires JDK 17+: https://jetty.org/docs/jetty/12/index.html

Since this is only for test code and CVE is medium and low, I'm thinking should we stick with v11 and JDK 8?

[dai-chen]

Security Report

 You have successfully remediated 3 vulnerabilities, but introduced 2 new vulnerabilities in this branch.

❌ New vulnerabilities:

CVE | Severity | CVSS Score | Vulnerable Library | Suggested Fix | Issue -- | -- | -- | -- | -- | -- CVE-2024-6763 | Low | 3.7 | jetty-http-11.0.24.jar | Upgrade to version: org.eclipse.jetty:jetty-http:12.0.12;org.eclipse.jetty:jetty-server:12.0.12 | None CVE-2024-6763 | Low | 3.7 | jetty-server-11.0.24.jar | Upgrade to version: org.eclipse.jetty:jetty-http:12.0.12;org.eclipse.jetty:jetty-server:12.0.12 | None

Security Report
You have successfully remediated 3 vulnerabilities, but introduced 2 new vulnerabilities in this branch.

❌ New vulnerabilities:

CVE Severity CVSS Score Vulnerable Library Suggested Fix Issue
CVE-2024-6763
Low 3.7 jetty-http-11.0.24.jar Upgrade to version: org.eclipse.jetty:jetty-http:12.0.12;org.eclipse.jetty:jetty-server:12.0.12 None
CVE-2024-6763
Low 3.7 jetty-server-11.0.24.jar Upgrade to version: org.eclipse.jetty:jetty-http:12.0.12;org.eclipse.jetty:jetty-server:12.0.12 None
✔️ Remediated vulnerabilities:

CVE Vulnerable Library
CVE-2024-6763 jetty-http-11.0.19.jar
CVE-2024-6763 jetty-server-11.0.19.jar
CVE-2024-8184 jetty-server-11.0.19.jar

[dai-chen]

Upgrading to new version in v11 instead of v12 to avoid bump JDK version to 17. As the security report from CI, this code change can fix 1 medium and 2 low vulnerabilities, though end up with another 2 low vulnerabilities that can only be fixed in v12.