Pax Web 7.2.14 has been released. It contains a fix on Jetty for MultiPartInputStreamParser compliance.
Checkout the release notes Pax Web 7.2.14 for more details.