{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ee1a4c72-acd7-5ccb-9531-3b7360da4cbd", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "undertow-websockets-jsr", "purl": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8", "type": "library", "group": "io.undertow", "bom-ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8", "version": "2.3.10.Final-tuxcare.8", "pedigree": { "ancestors": [ { "name": "undertow-websockets-jsr", "purl": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final", "type": "library", "group": "io.undertow", "version": "2.3.10.Final" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2014-7816", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:2e0b59c5-6ac3-5e36-a145-feb4b590bc3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-7816 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2016-7046", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:86128fe1-3661-5a38-8e30-1d5e2d95664f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-7046 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2017-12165", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:00373c16-46cb-567b-887d-71d6c43b2d9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12165 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2017-12196", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:c51bf8b8-ffab-52d4-a406-39c75336e9d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12196 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2017-2666", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:489d3810-d2dd-5fba-a073-2cff36c0ab7c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-2666 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2017-2670", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:235cdee0-da24-5654-ab20-e37e96fb5c57", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-2670 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2017-7559", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:cbf1bba5-ae07-5a72-9081-737f6dde750a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7559 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2018-1114", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:86f7fb6b-915c-50bf-941d-778a1d80ea23", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1114 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2018-14642", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:4717670f-543e-5df8-a771-612c6bf2afdf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-14642 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2019-10184", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:16f7f6d8-d26a-54a9-bbee-d72fc441e9cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10184 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2019-10212", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:967fc506-1cef-5621-9a4e-ab76840ba101", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10212 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2019-14888", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:f625f3b8-7e53-51cd-aa17-490821bdc1d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-14888 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2019-3888", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:8dd5c1b1-c4e7-56c8-ab1c-312c1d40f3ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-3888 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2020-10687", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:992fc385-912f-5191-ae8d-517097756572", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-10687 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2020-10705", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:49ebfe4f-f5bd-5576-8b76-993cc8b4e6ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-10705 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2020-10719", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:abc398fe-4bbe-5a5e-bd83-cf3a4dd99f34", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-10719 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2020-1745", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:48bc078e-5f12-586d-802d-e586824e30ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-1745 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2020-1757", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:f01bf939-51ba-56e8-bf72-bd3423b5869e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-1757 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2020-27782", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:bdd94d69-541b-5562-a26b-99e4ea8230a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27782 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2021-20220", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:e132459b-b847-5711-9a0f-e17c8fd44ad4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-20220 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2021-3597", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:599717d1-37ee-5aee-b2aa-170969bd8c2e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3597 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2021-3629", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:c4da12e1-8d5d-5dce-8592-da1aa61f6019", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3629 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2021-3690", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:55614cbb-ec6f-5cc6-8927-add548f1c901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3690 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2021-3859", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:9cff85cc-f1b9-5ee3-a038-d5c7960e0db9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-3859 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2022-2053", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:f87dc69a-3b83-5d43-b62f-17f897a156a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2053 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2022-4492", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:b3d763d2-644a-5a9d-8a00-671f48c55092", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-4492 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2023-1108", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:df873102-d331-5953-a58c-f82bf5cf719f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-1108 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2023-1973", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:7005dcf4-9ec3-5a00-9a8c-61be8bac8b27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-1973 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2023-4639", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:a565aebc-35f3-5362-a67e-83a9352fc055", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-4639 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2024-1459", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:685ae540-4da8-5ba7-807a-04bc2fb85ad6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-1459 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2024-1635", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:bd71c83e-2cd6-5d0f-9c8a-8aea58e26830", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-1635 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2024-3653", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:edd19291-85d6-5e7c-be92-2429aa83e1a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-3653 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2024-3884", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:0a29da08-cce2-56d0-8bf9-369aa54156fd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-3884 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2024-4027", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:6de01256-2988-538a-9b24-c38e0bb7b2c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-4027 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2024-4109", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:8183d275-d774-551f-b9b8-77bf318cd928", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-4109 is a false positive for io.undertow:undertow-websockets-jsr 2.3.10.Final-tuxcare.8." } }, { "id": "CVE-2024-5971", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:3b0598ea-ba40-5cf3-ad9d-04945d235bce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-5971 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2024-6162", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:33e0e9bf-7316-5fab-b562-ce6431b8304a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-6162 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2024-7885", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:321f2583-dd0a-5ed7-bb1f-be3e8ce6e5cb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-7885 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2025-12543", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:f2cc1c97-ff5c-54bb-b0cb-0286ce3b9646", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-12543 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2025-9784", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:ad445e77-6477-564e-afb9-2f4a3ea3bae1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-9784 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } }, { "id": "CVE-2026-3260", "affects": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ], "bom-ref": "urn:uuid:47a5c0a6-304a-5d5d-91f7-173b192e7999", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-3260 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-websockets-jsr." } } ], "dependencies": [ { "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.10.Final-tuxcare.8" } ] }