Hello,
We are currently revamping how we communicate about security vulnerabilities. However, I’ve done some digging in our historical data. I can see that Sonatype Nexus Repository version 3.30.0 included an upgrade of Eclipse Jetty to 9.4.40.v20210413, which I believe should resolve both of those CVEs.