{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4814e2a7-6b82-5df3-9de6-de8d3f4cd707", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "documentation-parent", "purl": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005", "type": "library", "group": "org.eclipse.jetty.documentation", "bom-ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005", "version": "11.0.28.tuxcare0005", "pedigree": { "ancestors": [ { "name": "documentation-parent", "purl": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28", "type": "library", "group": "org.eclipse.jetty.documentation", "version": "11.0.28" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2006-6969", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:ca0b5b3d-1c09-5ac8-ae2b-bfa94540f7f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2006-6969 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2011-4461", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:5bd07d64-f3f3-5136-b458-1b6fc9262ee3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4461 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2015-2080", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:af3d91b6-862f-57a1-8a62-f87e64a632ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2080 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2016-4800", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:71fa6db4-f9c9-57c1-8a77-3c352c3e9517", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-4800 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2017-7656", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:622b5f72-9696-5e44-960f-f04f52fdb13a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7656 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2017-7657", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:d2da0399-a72c-5fdb-b319-a90af092c858", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7657 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2017-7658", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:2da14265-96ae-5e42-b0c2-91d31bd71121", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7658 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2017-9735", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:ed7d93f0-70ff-52e4-a39a-f5217b389162", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-9735 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2018-12536", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:c9b6f8ac-424a-5329-b2a1-519194f1fb03", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12536 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2018-12538", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:da7cbce6-7fe4-5875-9698-f4a4965e961c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12538 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2018-12545", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:45beb8f3-c8a0-5941-9fec-63a3584aded5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12545 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2019-10241", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:027dbd4e-ff8d-5145-8283-a628eb8b82a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10241 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2019-10246", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:964366a0-3fc3-5b5b-a206-354b15b999fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10246 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2019-10247", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:7d5d6bd8-958a-5ae1-99c0-6ea94619b64c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10247 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2019-17632", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:82e93531-0335-5883-9733-f2ed430b243b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17632 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2019-17638", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:72c54a0f-ed86-53c2-a15f-90df2c405cec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17638 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2020-27216", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:14239b95-6822-5780-b2b3-6d084c2b11ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27216 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2020-27218", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:29c707a6-31c3-560f-b57f-7b1dfe295934", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27218 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2020-27223", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:3ed8da21-cc6d-5d75-af5c-48ebf213c457", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27223 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2021-28163", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:6d88f204-af00-59eb-8b57-4e66d630d6e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28163 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2021-28164", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:d012a239-207b-5185-845f-d2f1f977b2bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28164 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2021-28165", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:4f459b55-9d5d-54ff-a818-962abbf2d9db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28165 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2021-28169", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:6dab8517-2a4b-581b-a309-041a0692d8b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28169 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2021-34428", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:0438880a-12a2-5f90-b352-f510d4ba6724", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-34428 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2021-34429", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:479d47a1-275b-523d-ab5d-43d065bd45d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-34429 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2022-2047", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:3a481283-5fb9-5528-8cc0-2f0d425728a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2047 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2022-2048", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:62dae0d2-7aac-50bd-a8b7-0b3bd27094a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2048 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2022-2191", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:1010a74d-6022-5b46-bf6c-7f9af9a3f5ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2191 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2023-26048", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:e457a730-f6cd-5832-a48e-35434535fd5a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26048 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2023-26049", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:67ec34fd-15d5-59e5-97b0-c173d280058e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26049 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2023-36478", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:262b8a42-6719-55b2-8554-a3bddbfecb52", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36478 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2023-36479", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:21abc2f9-0763-50f3-8035-9de0d250562a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2023-36479 does not affect version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent. Version 11.0.28 is not affected by CVE-2023-36479: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." } }, { "id": "CVE-2023-40167", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:8d21e203-ca96-52a7-8852-2529f86cff10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40167 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2023-41900", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:4558cb37-f5ee-5d52-aeac-9d755e15a42f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41900 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2023-44487", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:3bd27154-42e1-5529-9a6d-55234683a133", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-44487 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2024-13009", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:5fdf4d56-4700-5891-a9a3-62581a241c73", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-13009 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2024-22201", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:5e9eba33-0eb1-5851-bef2-e3971a3f5708", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22201 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2024-6762", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:96b1d44f-e40f-55a4-83d2-d6e2ddc14085", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6762 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2024-6763", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:98aee67b-07a9-5b22-9b72-1d2691daefd2", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-6763 does not affect version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent. fix for CVE for this version has been already backported by the original developers, so this brunch is not vulnerable", "justification": "code_not_present" } }, { "id": "CVE-2024-7708", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:aba8814b-ed84-5a0d-bbdc-adb4202cd3f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-7708 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2024-8184", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:1fbf5404-2d66-55eb-9e70-ba51a01539e1", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-8184 does not affect version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent. Version 11.0.28 is not vulnerable. Summary: The target repository already has the security fix for CVE-2024-8184 applied. The code uses atomic compute() operations with reference counting and proper cleanup mechanisms to prevent memory exhaustion. [terminalized not_affected from patch_application_manual/not_vulnerable]", "justification": "code_not_present" } }, { "id": "CVE-2024-9823", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:87e62a63-9061-52c2-9ed6-ddf3753a6787", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9823 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2025-11143", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:c68c7c91-93a6-51ef-ba3b-3ce9dd6364a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-11143 is fixed in version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2025-5115", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:41a84773-e62f-5e31-9a40-faebd34dc082", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-5115 does not affect version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent. fix for CVE for this version has been already backported by the original developers, so this brunch is not vulnerable", "justification": "code_not_present" } }, { "id": "CVE-2026-10050", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:ab7d94a8-90a1-5138-a8dc-d03957790d25", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-10050 is fixed in version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2026-10051", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:637ec1ff-128f-5929-ad59-7660aae2b6c2", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-10051 does not affect version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent. not_affected \u2014 Jetty 11.0.28 is not affected by CVE-2026-10051. The vulnerability describes trailer leakage in Jetty 12.x's redesigned internal.HttpConnection where the _trailers field was never cleared between requests. Jetty 11.0.28 has a fundamentally different architecture where _trailers exists in HttpChannelOverHttp and is properly cleared via the established recycle() mechanism between HTTP/1.1 keep-al...", "justification": "code_not_present" } }, { "id": "CVE-2026-1605", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:01a21c4d-23e3-58d9-b44e-812a497bbb8c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-1605 does not affect version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent. Version 11.0.28 is not vulnerable. Summary: Target repository is NOT vulnerable to CVE-2026-1605. The vulnerability affects Jetty 12.x (versions 12.0.0-12.0.31 and 12.1.0-12.0.5), while the target is running Jetty 11.0.28.tuxcare0001, which uses a different architecture for request decompression that does not exhibit this vulnerability. [terminalized not_affected from patch_application_manual/not_vulnerable]", "justification": "code_not_present" } }, { "id": "CVE-2026-18659", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:48d8fba1-8670-5e0f-9faf-e5664cccfc74", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18659 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2026-18660", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:33a32b00-b40f-5f07-b776-3ccdd4a6931b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18660 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2026-18661", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:e4515cdc-3a06-5e46-9a8f-78159a11dc89", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18661 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2026-18662", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:afd2ea9d-a439-59d2-9150-4f3877dcafec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18662 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2026-19864", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:d5768585-d222-5225-995b-0361598e8a4e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-19864 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2026-2332", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:63019729-62aa-54dc-bdbc-25fae60a5bfa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-2332 is fixed in version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2026-5795", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:84741a96-70cf-51c6-a95b-cbd565d1b70c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-5795 is fixed in version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2026-6790", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:22eba7ed-67ac-558e-a9fd-e36fccca575e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6790 is fixed in version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } }, { "id": "CVE-2026-8384", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:f643f303-2641-51d4-abae-7613503a630d", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-8384 does not affect version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent. not_affected \u2014 Jetty 11.0.28 is not affected by CVE-2026-8384. While the target contains similar semicolon-handling code in decodePath() that doesn't update the character tracking variable, the vulnerability does not manifest due to architectural differences. Jetty 11 uses a two-stage normalization process (decodePath then canonicalPath) where the path is always fully normalized before security checks, unlike...", "justification": "code_not_present" } }, { "id": "GHSA-58qw-p7qm-5rvh", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ], "bom-ref": "urn:uuid:10e5d91f-55dc-53bc-8565-00456758300a", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.documentation:documentation-parent." } } ], "dependencies": [ { "ref": "pkg:maven/org.eclipse.jetty.documentation/documentation-parent@11.0.28.tuxcare0005" } ] }