{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:22e991a9-0107-5c8f-9b70-b7e1daee8b74", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "jetty-ee10-demo-jetty-webapp", "purl": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1", "type": "library", "group": "org.eclipse.jetty.ee10.demos", "bom-ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1", "version": "12.0.22-tuxcare.1", "pedigree": { "ancestors": [ { "name": "jetty-ee10-demo-jetty-webapp", "purl": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22", "type": "library", "group": "org.eclipse.jetty.ee10.demos", "version": "12.0.22" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2006-6969", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:b3183b3f-82d1-5834-835d-e8a058ff01e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2006-6969 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2007-1651", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:380ce6f4-75a8-5b19-a7f5-2643c61efd5e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2007-1651 does not affect version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp. Target Jetty 12.0.22 is NOT affected. The CVE concerns a CSRF / session-restoration weakness in Jetty's OpenID Connect support; the two vendor patches (5f2c96dc, 2020 \u2014 move ID-token expiry to initial-auth-only + proper logout/validate delegation; e9f260f4, 2021 \u2014 replace the single anti-forgery CSRF token with a per-session, SecureRandom-keyed csrfMap and mandatory `state` validation) are UPSTREAM Jetty fixes authored by lachlan@webtide.com years before the 12.0.22 release (June 2025). Both fix commits are ancestors of HEAD, and the shipped jetty-core/jetty-openid and jetty-ee9/jetty-ee9-openid modules contain the complete post-fix code. The pre-fix vulnerable pattern (single CSRF_TOKEN setAttribute, isExpired() gating session validity, empty logout()) is absent. Not a TuxCare backport \u2014 the fix is native/upstream, so verdict is not_affected (justification code_not_present), not already_fixed.", "justification": "code_not_present" } }, { "id": "CVE-2007-1652", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:bd68c910-f441-5b02-b6c7-20b9dc9a90cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-1652 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2011-4461", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:204edd00-d4a4-5c46-99de-f59b1a1f8ad3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4461 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2015-2080", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:4bedad98-2324-5979-8a50-8c6e7c62be32", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2080 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2016-4800", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:d0861130-991b-52a8-983b-fecaf50a2cc0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-4800 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2017-7656", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:14492782-d555-5007-a5c6-6fa90f43fdaa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7656 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2017-7657", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:09bb3911-1064-544d-ac3d-00751d5a91fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7657 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2017-7658", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:07e8726f-f5da-514d-a16a-371eecd2e3b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7658 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2017-9735", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:46c53d9f-ef10-54a8-9fb4-a933c9592dce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-9735 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2018-12536", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:90226ccd-2fa8-5204-a018-322b011725cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12536 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2018-12538", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:3310fd56-44ac-5de4-8f67-ee234838c833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12538 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2018-12545", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:09be7d64-a7dd-5e76-b04e-bcdd62ad7b3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12545 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2019-10241", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:d4adfe22-c3b2-527c-84de-2b3fde2d55fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10241 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2019-10246", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:46f4a81a-eb27-5945-84fd-8d894b48ba15", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10246 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2019-10247", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:95cb0f02-d389-55ab-8733-a2ceb33ab7e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10247 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2019-17632", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:b04a2f7e-80c5-52b9-95fb-eeb58e4645e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17632 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2019-17638", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ef52adae-0b18-5085-9d83-c2404a1551dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17638 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2020-27218", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:488e0a13-75a6-51f2-b697-258973299d8d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27218 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2020-27223", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:1db2aafd-1537-5066-aa97-7a8fcb0d918a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27223 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2021-28165", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:805c9194-3886-5f4f-8a8e-19b65dc71041", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28165 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2021-34428", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:3f63b805-b63d-58c7-b340-e281122c3ce4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-34428 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2022-2047", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:3826ad22-d0dc-5839-9570-c6960a2c8674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2047 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2022-2191", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:9b1cb0f3-1d29-58fe-80d0-545f76bfa6fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2191 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2023-26048", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:98587ab0-1b3d-5301-b7bf-7a6f425f8b14", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26048 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2023-26049", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:8861b600-fde1-5076-928f-2a31e2bd9ec3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26049 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2023-36479", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:6fb7a477-2078-55ca-b58d-caf48cebc613", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36479 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2023-40167", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:99a6750c-cfdf-5241-8788-e59216865e60", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40167 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2024-13009", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:9c1f42b3-4ff7-56f3-a8d5-19b647360260", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-13009 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2024-6763", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:25d2fae3-ec55-50d7-b244-f42145594125", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6763 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2024-7708", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:bf94b7a6-3852-5cc3-998d-a0df2f85553a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-7708 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2024-8184", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:46759058-c774-513d-afdf-65cf4b6ed5fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-8184 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2024-9823", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:b2a19d78-a677-5eff-b603-741953d236a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9823 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2025-11143", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:7bebf430-0cca-545d-964c-64e51a6d62c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-11143 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2026-10050", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:07cb911d-597b-5569-bcdc-414749861cc0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-10050 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2026-10051", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:13f5b989-3665-53c0-ba1e-c571f3b01823", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10051 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2026-1605", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:00bd8954-79a5-56ff-b73a-3578d156eaa9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1605 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2026-18659", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:f2bd9726-8cf2-5ec1-a4bb-0427bb79fc4e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18659 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2026-18660", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c3057376-6b44-523a-b26a-1daffcfb42f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18660 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2026-18661", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:4f39dbf8-7d89-5240-a8f7-b1b192d7bb81", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18661 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2026-18662", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:e0cc3b26-4a63-59d5-812c-7f9230bbbd71", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18662 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2026-19864", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:126b37f6-ce2f-50d7-8349-da8dcfd560ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-19864 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2026-2332", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:0a16bd7d-7a38-53c4-86ec-890caa92e00d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-2332 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2026-6790", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:06204783-1d02-5c41-8c97-68730bfa7dc5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6790 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } }, { "id": "CVE-2026-8384", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:a3f58d29-cb8d-5a37-85c8-6ab2d917e965", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-8384 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.demos:jetty-ee10-demo-jetty-webapp." } } ], "dependencies": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10.demos/jetty-ee10-demo-jetty-webapp@12.0.22-tuxcare.1" } ] }