{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a17e19ec-48d0-59d0-a86f-09fe0ef17608", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "jetty-all", "purl": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7", "type": "library", "group": "org.eclipse.jetty.aggregate", "bom-ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7", "version": "9.4.58.v20250814-tuxcare.7", "pedigree": { "ancestors": [ { "name": "jetty-all", "purl": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814", "type": "library", "group": "org.eclipse.jetty.aggregate", "version": "9.4.58.v20250814" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2006-6969", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:401acfb2-2de1-5701-985d-530a98f0d290", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2006-6969 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2011-4461", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:41951c58-83e4-50a1-98d3-9fc712ae3a79", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4461 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2015-2080", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:0f43c363-20ff-5b72-af4c-3ca459d512e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2080 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2016-4800", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:59114b94-dd4a-5679-b4ab-02aa38be21d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-4800 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2017-7656", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:a2aec430-1c1f-51f4-a93b-fc12269b3962", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7656 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2017-7657", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:11047949-efbe-50f3-98ec-24813d3ef485", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7657 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2017-7658", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:6447a90a-6c60-5e99-88ef-73d4a567a84f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7658 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2017-9735", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:ed9ec980-d47f-591b-8ad7-4665a410fd9a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-9735 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2018-12536", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:42bf273c-cc27-5d5f-8139-2b3c58e1852e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12536 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2018-12538", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:9125d68c-733c-5182-b7d7-912dbec9ff6c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12538 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2018-12545", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:d7a7b762-89fe-54b0-9597-9c23b042e1b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12545 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2019-10241", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:ec2aa6b6-1416-5af9-bb05-235b78ef358e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10241 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2019-10246", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:666e11b0-0fb4-51ff-9492-14e5bdcf528a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10246 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2019-10247", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:d733429e-4ae3-54d7-aa2f-e4fbd87cd4a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10247 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2019-17632", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:78457d41-2537-50ba-94dd-99ef29a2894e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17632 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2019-17638", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:e16d47f3-4a28-5e33-a940-d6e8861439c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17638 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2020-27216", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:e45be3bb-1772-5533-89af-e341469b02e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27216 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2020-27218", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:cbeea01f-4a53-51b1-af89-44d5e39d2f13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27218 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2020-27223", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:4a6d8c75-efc9-5a43-ad4d-cec8cb934451", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27223 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2021-28163", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:6d6d40bb-5575-5a40-b623-a854f34b51c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28163 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2021-28165", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:53c9023a-e259-519c-9032-3320cc7a7d6f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28165 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2021-28169", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:b091f6af-dda5-5310-a09b-c855f654c149", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28169 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2021-34428", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:905a5d7e-9e4f-5e11-b938-e4dea440a3be", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-34428 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2022-2047", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:f602c1c8-78bf-5a63-98f0-90fdff6a66b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2047 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2022-2048", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:2ae649ca-6682-51dc-b028-ecee1473db95", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2048 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2022-2191", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:1bc1f69d-109b-575b-b1cb-106af91fdffb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2191 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2023-26048", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:959b941d-d288-56ca-a635-c25a1b9a9bd7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26048 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2023-26049", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:b753fea8-d454-56a8-839e-4a45058c3d70", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26049 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2023-36478", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:1de5ff27-168c-5c95-a5df-3625c0013cd4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36478 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2023-36479", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:4f06c09b-c193-579b-ba62-1f1d0f4a047d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36479 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2023-40167", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:86cf697b-d923-52ac-911d-d15e5ed895bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40167 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2023-44487", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:c8d94517-1861-5826-997d-d5a85709f210", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-44487 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2024-13009", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:360acbc2-8bf6-56f6-a754-39db443f3657", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-13009 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2024-22201", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:746319e8-14e8-5d8d-8fe0-3ed5b6c31e4b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22201 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2024-6763", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:a0dbed9e-3772-53a7-b87d-0266e5ef47fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6763 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2024-7708", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:5440409f-b16f-50e5-8ab6-e9834ba7df8b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-7708 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2024-8184", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:cff665a4-e224-5b90-9905-e9dc39a975ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-8184 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2024-9823", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:95959b1e-431d-5b90-ae95-3123294448d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9823 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2025-11143", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:eeba1a3d-aec1-54c4-aaf5-610e64a766c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-11143 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2025-5115", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:670bab50-4b80-5519-b33d-bae0fb4b22ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-5115 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2026-10050", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:9c0d0870-4435-5db3-8049-735cc4fef166", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10050 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2026-10051", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:d8c29f64-044d-5065-85c4-437f14006c7d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10051 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2026-1605", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:d1496ff4-1046-5f45-941b-10c0249314c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1605 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2026-18659", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:5b9a8742-3307-5a79-ae5b-7f1d31fe970d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18659 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2026-18661", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:e747307a-3633-57dc-aefd-bf1c19dd17ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18661 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2026-18662", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:829bf731-8ead-5e6f-99ac-c02c02e4e177", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18662 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2026-19864", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:748b0661-486f-5841-888f-d5584348177f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-19864 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2026-2332", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:e5771e72-5065-5ec2-b69e-e4fd16fbc96a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-2332 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2026-5795", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:5f23b7b9-538b-559f-bdcf-2a6261c37d13", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-5795 is fixed in version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2026-6790", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:63d97fee-ce16-5985-9c9b-b046c7ce5014", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-6790 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } }, { "id": "CVE-2026-8384", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:1f7a562d-aeb6-5e78-84f9-37e628e8385d", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-8384 does not affect version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all. not_affected \u2014 Jetty 9.4.58.v20250814 is not affected by CVE-2026-8384. The vulnerability exists only in Jetty 12's refactored canonicalPath() implementation that combines path decoding and canonicalization with slash-state tracking. Jetty 9.4 uses a two-stage architecture (decodePath() followed by canonicalPath()) that correctly normalizes paths containing semicolon path parameters before dot-dot segments, p...", "justification": "code_not_present" } }, { "id": "GHSA-58qw-p7qm-5rvh", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ], "bom-ref": "urn:uuid:adc9e04a-a745-5dba-ae0e-9bfcd923d5b4", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.aggregate:jetty-all." } } ], "dependencies": [ { "ref": "pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.58.v20250814-tuxcare.7" } ] }