{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f916f5da-fb4d-5053-a034-c329027a5233", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "code-examples", "purl": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005", "type": "library", "group": "org.eclipse.jetty.documentation", "bom-ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005", "version": "11.0.28.tuxcare0005", "pedigree": { "ancestors": [ { "name": "code-examples", "purl": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28", "type": "library", "group": "org.eclipse.jetty.documentation", "version": "11.0.28" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2006-6969", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:c46dd6fb-7104-5a46-9132-a78eb54c22c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2006-6969 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2011-4461", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:6adda96f-8721-5640-85ad-417c26414c4b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4461 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2015-2080", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:a6523713-4395-5a58-98c0-aa5221cbf94d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2080 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2016-4800", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:524222bc-8705-50bf-a93b-104f8f80e3f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-4800 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2017-7656", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:5f0b8ea7-0a56-53fd-827a-bd19ab2f87d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7656 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2017-7657", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:16b44a87-4a24-559e-9d0c-5ce8fd7efc6d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7657 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2017-7658", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:a7c94f41-ab32-5283-b949-b3c3ab88ad2a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7658 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2017-9735", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:6e76fbf9-afa9-5060-9e63-5aa9441b4bd8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-9735 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2018-12536", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:8c4e2200-5a99-5c27-bebd-ce11dd531900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12536 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2018-12538", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:af9e3dba-d4ca-5d63-8087-2419899d4f42", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12538 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2018-12545", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:5dd87e23-beb3-564d-96f6-e4837a1332d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12545 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2019-10241", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:62be8567-9ddd-5e10-af52-52eef722cbfb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10241 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2019-10246", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:e4e2681a-c494-566a-911a-c48b4ba7cc20", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10246 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2019-10247", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:0547bb88-8b27-547b-93e9-f6593d35b7e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10247 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2019-17632", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:05662148-da19-594b-bc00-5acc2eeeda77", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17632 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2019-17638", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:9e7e705b-6a27-543c-9f0b-b8bc79bfa1d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17638 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2020-27216", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:89b96225-dda2-55c2-b6ee-a83d746ac62f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27216 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2020-27218", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:a7ae3df2-c0ec-5872-b1f6-c1eb0cc550f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27218 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2020-27223", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:49ba7130-fe52-5d11-b773-876eadada84a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27223 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2021-28163", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:53c47b8c-c655-535a-a7af-d53780395d1a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28163 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2021-28164", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:888d1b46-ae4e-5fa7-b413-11cafded2df8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28164 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2021-28165", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:da5bddec-cf74-5f1e-b7b9-abd09505c0fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28165 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2021-28169", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:f7c09a46-95b5-5f0d-871b-5795fb192189", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28169 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2021-34428", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:96a0824a-6e98-522e-a640-9177d6123249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-34428 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2021-34429", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:3782e868-6367-5b1b-b3cd-214487459bf9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-34429 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2022-2047", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:4e6e9a21-c815-5181-99a9-c66306110df7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2047 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2022-2048", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:c19e56e7-7b68-5064-8527-996fb1461592", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2048 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2022-2191", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:ef6e1f8d-c6e7-5579-9921-e0a4ac3811e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2191 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2023-26048", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:1075d8ba-db32-5cf6-8e02-4c3f1dd4f12e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26048 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2023-26049", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:936a4887-a9b2-573c-9f05-b1045e028347", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26049 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2023-36478", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:058c7169-a2ef-583c-9faa-162c42305a42", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36478 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2023-36479", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:5a4a4195-f1ae-561e-9c32-ea7e92ca9792", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2023-36479 does not affect version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples. Version 11.0.28 is not affected by CVE-2023-36479: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." } }, { "id": "CVE-2023-40167", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:93a1336f-1e46-52db-a6ae-ed1cb68324a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40167 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2023-41900", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:e518dda5-451b-51c8-b5f7-bd55786c7e82", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41900 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2023-44487", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:c5772eb4-1e07-5256-b972-fa5664b36a8b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-44487 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2024-13009", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:47359c88-cfc4-507e-8bcd-1fa9eae630f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-13009 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2024-22201", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:a5c574e8-21c6-5db6-9a72-ada76004ab94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22201 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2024-6762", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:533f2cd5-cf45-5ff2-abcc-bd783498c353", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6762 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2024-6763", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:8b70ea1f-60f5-5a2e-b865-3e6e4f26000f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-6763 does not affect version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples. fix for CVE for this version has been already backported by the original developers, so this brunch is not vulnerable", "justification": "code_not_present" } }, { "id": "CVE-2024-7708", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:079f8eda-fd5b-5078-8a63-07b6e4236dab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-7708 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2024-8184", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:403e3890-b3d1-597a-9ce5-c014a79028fc", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-8184 does not affect version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples. Version 11.0.28 is not vulnerable. Summary: The target repository already has the security fix for CVE-2024-8184 applied. The code uses atomic compute() operations with reference counting and proper cleanup mechanisms to prevent memory exhaustion. [terminalized not_affected from patch_application_manual/not_vulnerable]", "justification": "code_not_present" } }, { "id": "CVE-2024-9823", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:efcd2ab5-5bb1-5acb-af7a-7d7295c27ef4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9823 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2025-11143", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:daaca758-9c90-5233-bf83-fca48da60ca1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-11143 is fixed in version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2025-5115", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:ab3f1d4c-feeb-513b-a98f-57399bf1b649", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-5115 does not affect version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples. fix for CVE for this version has been already backported by the original developers, so this brunch is not vulnerable", "justification": "code_not_present" } }, { "id": "CVE-2026-10050", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:9dc4efe9-4839-581d-8e88-53adb725d036", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-10050 is fixed in version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2026-10051", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:0478b417-4667-5d2c-9565-09fe7de49d9f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-10051 does not affect version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples. not_affected \u2014 Jetty 11.0.28 is not affected by CVE-2026-10051. The vulnerability describes trailer leakage in Jetty 12.x's redesigned internal.HttpConnection where the _trailers field was never cleared between requests. Jetty 11.0.28 has a fundamentally different architecture where _trailers exists in HttpChannelOverHttp and is properly cleared via the established recycle() mechanism between HTTP/1.1 keep-al...", "justification": "code_not_present" } }, { "id": "CVE-2026-1605", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:64ccff58-28c7-518e-bb0e-d4062d20ed60", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-1605 does not affect version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples. Version 11.0.28 is not vulnerable. Summary: Target repository is NOT vulnerable to CVE-2026-1605. The vulnerability affects Jetty 12.x (versions 12.0.0-12.0.31 and 12.1.0-12.0.5), while the target is running Jetty 11.0.28.tuxcare0001, which uses a different architecture for request decompression that does not exhibit this vulnerability. [terminalized not_affected from patch_application_manual/not_vulnerable]", "justification": "code_not_present" } }, { "id": "CVE-2026-18659", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:a5921fbd-5f56-5a5e-ad63-38d3aa41fcfa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18659 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2026-18660", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:af63c8e7-59c9-5c4f-87bd-9e335b8c14fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18660 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2026-18661", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:cca27d6e-4046-57d9-8d4f-3044495e9a96", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18661 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2026-18662", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:12c5b365-ec65-50dc-91d9-8e176d1ad9fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18662 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2026-19864", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:494b633e-48c6-5b2b-85b5-d47f76fb5b88", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-19864 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2026-2332", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:7cb87667-4c8d-5815-8069-ae5d981487a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-2332 is fixed in version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2026-5795", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:ce5cbc8e-208c-5b50-991d-c98c725dbec4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-5795 is fixed in version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2026-6790", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:2b8fefb9-00cf-513f-bb6d-53994e852e26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6790 is fixed in version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2026-8384", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:aa6b9328-64d6-5ecd-aa98-ea9e19196e5b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-8384 does not affect version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples. not_affected \u2014 Jetty 11.0.28 is not affected by CVE-2026-8384. While the target contains similar semicolon-handling code in decodePath() that doesn't update the character tracking variable, the vulnerability does not manifest due to architectural differences. Jetty 11 uses a two-stage normalization process (decodePath then canonicalPath) where the path is always fully normalized before security checks, unlike...", "justification": "code_not_present" } }, { "id": "GHSA-58qw-p7qm-5rvh", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:091b9b42-ec17-5c7f-b937-74f8029989f3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:code-examples." } } ], "dependencies": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.28.tuxcare0005" } ] }