{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3fac6c72-d98e-50c9-b651-bde0cd2155aa", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "code-examples", "purl": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004", "type": "library", "group": "org.eclipse.jetty.documentation", "bom-ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004", "version": "11.0.29.tuxcare0004", "pedigree": { "ancestors": [ { "name": "code-examples", "purl": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29", "type": "library", "group": "org.eclipse.jetty.documentation", "version": "11.0.29" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2006-6969", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:e8f99999-dd92-59ce-8e5c-a65166fe2ce0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2006-6969 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2011-4461", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:5ce93e9e-424a-5a2b-8b3f-81f661ec6caa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4461 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2015-2080", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:88aab299-7036-5a6d-8310-e2d0bf9d2651", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2080 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2016-4800", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:39e9f487-2f7c-5d26-807a-295f0c65ebfb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-4800 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2017-7656", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:a8007e83-ae8c-5758-983a-765b4fad457b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7656 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2017-7657", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:5e9d4dc7-3e3f-51ec-85cc-044fb790091c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7657 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2017-7658", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:d2edffb9-c029-5eb7-b328-b427f8ed3528", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7658 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2017-9735", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:f574b749-55ce-5320-8391-b96a4a190302", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-9735 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2018-12536", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:84b80e5d-b42f-5f39-8a5a-f9879e08f210", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12536 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2018-12538", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:f7524e5d-6222-52a5-b452-4279dda22add", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12538 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2018-12545", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:ac725576-b25d-5d17-986e-fe4bd904d6db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12545 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2019-10241", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:2ee6d991-34cd-5391-9d7d-eed340db0caa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10241 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2019-10246", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:bc1e2863-1e39-57f5-afa8-84379b7b05a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10246 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2019-10247", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:b0704ef7-1e2f-5c8c-94ca-076a6da2fc0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10247 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2019-17632", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:82bbcae6-71c0-5d90-b592-505a00ed25a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17632 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2019-17638", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:baa9e031-c15a-5cca-9306-697fa77c4b3c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17638 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2020-27216", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:a721d4f3-b524-5f66-949c-159843486ef4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27216 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2020-27218", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:b513233b-53ea-5f90-8059-b7cf44729d46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27218 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2020-27223", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:759557c0-13e7-58be-a78f-3c5b7929b3d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27223 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2021-28163", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:354d575c-4607-5e65-aa69-ebf9459fd304", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28163 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2021-28164", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:aa14929a-e9bf-5bf2-a9fd-303949029eaa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28164 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2021-28165", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:90b120e2-76b0-554b-b33d-19aa08957212", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28165 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2021-28169", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:e9ad0a37-1f0e-54d2-b59f-a30f0a4b7ef0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28169 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2021-34428", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:0e40c284-096b-50a4-9fe5-29ea2cead541", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-34428 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2021-34429", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:36b3f48b-61b3-5ccc-9416-ab47d39dec5a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-34429 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2022-2047", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:02c0469a-bffa-5b54-beb4-00daca888759", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2047 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2022-2048", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:c8699526-62ca-5eda-908e-c733b00ad6d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2048 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2022-2191", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:a27bc2aa-6a62-5864-aec2-5f792b0c648e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2191 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2023-26048", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:12a64dce-5efd-5140-9b18-4564193dee6f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26048 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2023-26049", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:49f5f20a-855b-5ca7-bdd9-ea9c37837ab2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26049 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2023-36478", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:c2336271-15cb-5584-9ac0-c09fcc2e6760", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36478 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2023-36479", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:36e88eee-f306-59b9-82a0-c2582819bb6c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2023-36479 does not affect version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples. Version 11.0.29 is not affected by CVE-2023-36479: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." } }, { "id": "CVE-2023-40167", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:ffd9542a-521e-5f97-b778-eb932db181ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40167 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2023-41900", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:799ad24a-d576-57f7-8175-a8588111695a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41900 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2023-44487", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:eec9caf7-6698-56e1-a4f8-eeeb441aa182", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-44487 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2024-13009", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:87fce27f-7848-5de6-affc-31ca6da01c9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-13009 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2024-22201", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:cc30f546-e12d-53ef-82f9-7e7368e587c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22201 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2024-6762", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:5351ab0a-9c20-54c4-896f-10da139b53a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6762 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2024-6763", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:13355f50-9e26-58d4-b461-338cab87c2cc", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-6763 does not affect version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples. fix for CVE for this version has been already backported by the original developers, so this brunch is not vulnerable", "justification": "code_not_present" } }, { "id": "CVE-2024-7708", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:e51b68d0-53cd-5ee0-a644-60b39b6e6395", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-7708 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2024-8184", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:175ce9cd-9a0c-5acb-98bb-73ab74a4f010", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-8184 does not affect version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples. Version 11.0.28 is not vulnerable. Summary: The target repository already has the security fix for CVE-2024-8184 applied. The code uses atomic compute() operations with reference counting and proper cleanup mechanisms to prevent memory exhaustion. [terminalized not_affected from patch_application_manual/not_vulnerable]", "justification": "code_not_present" } }, { "id": "CVE-2024-9823", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:fac15962-5e2b-552a-95b4-7d8918f0a9b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9823 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2025-11143", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:70120dd0-3d54-5237-a824-9c0b182526cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-11143 is fixed in version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2025-5115", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:280d23db-2dfb-5944-a1ef-dd2b5f028a60", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-5115 does not affect version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples. fix for CVE for this version has been already backported by the original developers, so this brunch is not vulnerable", "justification": "code_not_present" } }, { "id": "CVE-2026-10050", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:30cec790-f129-5e74-8d43-a351f2b00db6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-10050 is fixed in version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2026-10051", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:d45ed39a-4d01-51f6-bd03-aa98e9a9eb3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10051 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2026-1605", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:773e0251-ff2c-5afe-8a85-081591d70724", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-1605 does not affect version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples. Version 11.0.28 is not vulnerable. Summary: Target repository is NOT vulnerable to CVE-2026-1605. The vulnerability affects Jetty 12.x (versions 12.0.0-12.0.31 and 12.1.0-12.0.5), while the target is running Jetty 11.0.28.tuxcare0001, which uses a different architecture for request decompression that does not exhibit this vulnerability. [terminalized not_affected from patch_application_manual/not_vulnerable]", "justification": "code_not_present" } }, { "id": "CVE-2026-18659", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:a7c2057b-49ce-5890-b812-83d9231b2999", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18659 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2026-18660", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:7713f963-30eb-5582-9424-7f285a395b70", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18660 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2026-18661", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:960cfbf2-3540-5b41-9876-fa0ea35c1714", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18661 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2026-18662", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:cd8355d5-956c-5faf-9a78-2309c3c619ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18662 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2026-19864", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:b996398c-f0a3-5764-b9e5-52790df8528a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-19864 affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2026-2332", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:3e4ba7c7-5feb-5dc3-9e8b-229e74af4a94", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-2332 is fixed in version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2026-5795", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:af1c79c0-e660-57b0-be3d-715baa8cd913", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-5795 is fixed in version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2026-6790", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:048676ac-455e-5860-a848-042110a8cf48", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6790 is fixed in version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } }, { "id": "CVE-2026-8384", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:8b5403f5-da9b-5deb-b18e-a488178b2728", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-8384 does not affect version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples. not_affected \u2014 Jetty 11.0.29 uses a fundamentally different architecture from the vulnerable Jetty 12.x code. The CVE describes a bug in Jetty 12's single-pass canonicalPath() method that performs both parameter stripping and path normalization inline. Jetty 11 uses a two-pass architecture where decodePath() strips semicolon parameters first, then canonicalPath() normalizes the result separately. This archite...", "justification": "code_not_present" } }, { "id": "GHSA-58qw-p7qm-5rvh", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ], "bom-ref": "urn:uuid:b15a414d-6cb5-54c2-ade6-efb87c1e4203", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 11.0.29.tuxcare0004 of org.eclipse.jetty.documentation:code-examples." } } ], "dependencies": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/code-examples@11.0.29.tuxcare0004" } ] }