jetty5 was prone to a remotely exploitable Denial of
Service flaw via hash collisions (CVE-2011-4461).