{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5100ef9f-06ed-5eb8-95cb-cec8826a239d", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "undertow-benchmarks", "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8", "type": "library", "group": "io.undertow", "bom-ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8", "version": "2.3.10.Final-tuxcare.8", "pedigree": { "ancestors": [ { "name": "undertow-benchmarks", "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final", "type": "library", "group": "io.undertow", "version": "2.3.10.Final" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2014-7816", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:af267c90-056d-5940-9221-0a0bf5794c57", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-7816 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2016-7046", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:0972ffcb-65ca-582e-9ef7-7ad500940148", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7046 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2017-12165", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:bc4fc6c5-ef8c-58e3-aa36-68c61e0cc752", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12165 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2017-12196", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:4f8c301a-0695-5e6e-9461-2f6b7e42f936", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12196 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2017-2666", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:ea308b36-ad67-5392-9ecd-b6fbfec0d05d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-2666 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2017-2670", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:a4bce0e4-f407-55d4-b953-668b7fb779d5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-2670 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2017-7559", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:147e2371-cc7d-5e25-be85-62aab95c5f1a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7559 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2018-1114", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:2c643667-5ff7-52f7-a054-19602f3b2018", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1114 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2018-14642", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:ede7dedc-b03d-5912-b336-7668c85ffd85", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14642 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2019-10184", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:2b7de0bf-cc75-5f9b-a89e-a187b64041e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10184 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2019-10212", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:684ddf9e-6b3b-5323-aea1-9b5232644739", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10212 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2019-14888", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:d26b9eda-3e1e-586b-ab0f-abb88c4343e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14888 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2019-3888", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:99320584-fa3c-53c3-a3f5-53edd77847e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3888 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2020-10687", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:9b987463-8d94-552b-8dce-0ba45ba5ebd0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-10687 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2020-10705", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:32829a73-323c-51f3-ada0-fac6dccb9883", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-10705 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2020-10719", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:4fb3a1d1-db0b-5ad0-a8c6-ea053ede7ea1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-10719 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2020-1745", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:d38c1c46-b1ee-5244-948f-baa42c915d2b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-1745 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2020-1757", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:1440d0c6-5bba-5023-853c-a2782e3b0993", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-1757 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2020-27782", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:a2ebf9eb-a4b0-5a18-a3de-3d24725299eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27782 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2021-20220", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:9138d23f-b098-5604-8dd4-11890e7e79bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-20220 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2021-3597", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:a3fc419a-17f0-5c9f-a66a-8040ff24eb9b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3597 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2021-3629", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:19d31b49-bcc2-50af-9e7d-0836e11afb89", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3629 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2021-3690", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:58a307bf-7c86-57f9-a9f7-b57b58fdbe48", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3690 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2021-3859", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:85f3bdc8-a3ee-5de6-829a-f4bf7409de0d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3859 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2022-2053", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:2a67e2ed-e13d-523b-85fe-8d22d7192609", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2053 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2022-4492", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:e2991d00-9b3d-57e4-a440-55abd7423b45", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-4492 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2023-1108", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:51106548-6646-5f80-9ca5-78f8dbd51467", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-1108 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2023-1973", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:69042ddf-b00d-54bb-afcf-de4139779d72", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-1973 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2023-3223", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:7aad9361-3da0-5f76-a8d4-3da2aeeb6f34", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-3223 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2023-4639", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:0008fb52-545a-5b1b-946d-5e5ddf1e8519", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-4639 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2024-1459", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:349df40d-6605-5a12-92e9-655100e5f006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-1459 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2024-1635", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:948e7e5a-3b0a-5d0b-a475-7b829038ca4a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-1635 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2024-3653", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:3239dd88-a101-5659-a19e-8929d35dec15", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-3653 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2024-3884", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:b9f376f2-2d7b-556f-89fa-efd31bf85e90", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-3884 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2024-4027", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:0c954ffb-0d11-554b-948d-e3a92d21f749", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-4027 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2024-4109", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:1d847f6d-83c7-51fe-93d6-81436732c76a", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-4109 is a false positive for io.undertow:undertow-benchmarks 2.3.10.Final-tuxcare.8." } }, { "id": "CVE-2024-5971", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:f1b3029a-45fc-55a0-9dcd-d79e4d75d24a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-5971 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2024-6162", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:5af8369f-e4cb-5049-b62b-2397030272de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-6162 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2024-7885", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:be6e79ca-b80e-5f69-8847-c2ab69384fec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-7885 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2025-12543", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:e493d6a3-07ae-5cb0-a021-54fb5c4e9abb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-12543 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2025-9784", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:6e0a4bdc-0597-5168-bf87-b23ce2acd63b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-9784 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2026-28367", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:39a4cd7f-eccc-525d-a6fe-19a4f4b8253e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-28367 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2026-28368", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:3af2da2a-4917-5a3a-bb72-c3151a9449cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-28368 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2026-28369", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:c9c4208e-271e-5236-bf12-1d43e4898803", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-28369 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } }, { "id": "CVE-2026-3260", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:e0fee800-8654-5fde-a5b6-a91d9f4977a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-3260 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-benchmarks." } } ], "dependencies": [ { "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.10.Final-tuxcare.8" } ] }