{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1af02b2e-3575-522d-b76f-893cd0a22dda",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "jetty-ee10-websocket-jakarta-server",
      "purl": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1",
      "type": "library",
      "group": "org.eclipse.jetty.ee10.websocket",
      "bom-ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1",
      "version": "12.0.22-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "jetty-ee10-websocket-jakarta-server",
            "purl": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22",
            "type": "library",
            "group": "org.eclipse.jetty.ee10.websocket",
            "version": "12.0.22"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2006-6969",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:008164e5-c7bc-5506-8ec3-3b5ef8449957",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2006-6969 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2007-1651",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8e901c11-83c4-58bc-9481-952b58b2f537",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2007-1651 does not affect version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server. Target Jetty 12.0.22 is NOT affected. The CVE concerns a CSRF / session-restoration weakness in Jetty's OpenID Connect support; the two vendor patches (5f2c96dc, 2020 \u2014 move ID-token expiry to initial-auth-only + proper logout/validate delegation; e9f260f4, 2021 \u2014 replace the single anti-forgery CSRF token with a per-session, SecureRandom-keyed csrfMap and mandatory `state` validation) are UPSTREAM Jetty fixes authored by lachlan@webtide.com years before the 12.0.22 release (June 2025). Both fix commits are ancestors of HEAD, and the shipped jetty-core/jetty-openid and jetty-ee9/jetty-ee9-openid modules contain the complete post-fix code. The pre-fix vulnerable pattern (single CSRF_TOKEN setAttribute, isExpired() gating session validity, empty logout()) is absent. Not a TuxCare backport \u2014 the fix is native/upstream, so verdict is not_affected (justification code_not_present), not already_fixed.",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2007-1652",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dffbd9af-5279-5767-be68-5f8dc40de21b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-1652 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2011-4461",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c631fdbb-c29d-5032-87c4-ab6e61af259f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-4461 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2015-2080",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:932cf7f1-9a75-528a-9e40-1aca41e3d1c6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-2080 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2016-4800",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:220df730-638b-5eb9-854a-13c8aa6ed49c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-4800 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2017-7656",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:243250f4-5e05-53f4-90b8-db1670c08d01",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7656 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2017-7657",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cec71251-7096-5820-86e2-89abfb389c8a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7657 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2017-7658",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b2556c28-047b-583b-947c-7c5ea6160017",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7658 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2017-9735",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ed28ed6c-1790-55c1-a077-16f2a76b214c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-9735 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2018-12536",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5f20f2ff-2ce9-535f-bf59-8a307f6d212c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-12536 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2018-12538",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9ca29920-72fe-5a41-886a-d7162ea91414",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-12538 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2018-12545",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a9c780bf-2203-5e28-ba28-1c69082f69c9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-12545 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2019-10241",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b04ae845-6f4d-5992-8a2d-016c0a234cde",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10241 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2019-10246",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:59e23e51-31a5-5171-93e5-da7b77d4c991",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10246 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2019-10247",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:124b40e0-faed-5360-a8d3-bbf8612e863f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10247 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2019-17632",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9b24e99b-2675-50f9-9803-bed4c1e27d01",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-17632 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2019-17638",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:07dccfb2-8339-5281-9426-6a2bcf42a585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-17638 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2020-27218",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0d5c24fb-ebda-5927-9c80-2bee38d16a5b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27218 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2020-27223",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aed0e808-d26f-5c05-88c4-9c9131c3b4d1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27223 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2021-28163",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:220ee719-83ec-58a3-8928-0ed06653a69a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28163 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2021-28165",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e4ea714e-8dad-5d07-9354-5ea1d14b0dbc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28165 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2021-34428",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6e86b15c-0faf-55d4-9e7d-2b3c36b65e1b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-34428 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2022-2047",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7b1c5946-8f13-5981-b1c0-ae9fd1159159",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-2047 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2022-2191",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c364d171-f923-5b56-b4fc-a18c2ae7e043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-2191 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2023-26048",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ac5bd5fb-2021-503c-8c03-f51a397d9c9d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-26048 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2023-26049",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e0e9d1a4-a7f1-51a2-92f3-92c4ad82205b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-26049 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2023-36479",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0437e6c5-ef01-5b5c-9c9f-06599006d36f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36479 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2023-40167",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2c0b69d3-3fa6-5978-9b07-ed03396780fc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40167 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2023-41900",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:37b2a306-0d3c-5694-b26c-9847dd8372d5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-41900 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2023-44487",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fb8be01c-331c-58b7-a8d4-2d1db3b8639b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2024-13009",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:56eaf8a0-05bd-52c4-9561-f5aba93ddbfe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-13009 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2024-22201",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a55d9c75-cc55-5ddf-906f-2642eb6942bc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22201 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2024-6763",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3c7d4be0-bf28-537c-bc27-6876548befc6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6763 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2024-7708",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d0ee295d-d729-5e17-aaf2-d593b7e2715a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-7708 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2024-8184",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ef72eefa-7059-5c05-b85a-6ad3b552bf21",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-8184 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2024-9823",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a2c974e3-e969-5c97-bc53-ddcd98ea3b36",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-9823 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2025-11143",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4be1ad51-0b0d-559d-9771-a6649e9409b9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-11143 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2025-1948",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:495da87d-d022-5c79-b181-9ba81ed63c8a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-1948 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2025-5115",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1f8e4058-e542-526e-85ad-bf9a7844b296",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-5115 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2026-10050",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:82175595-e75e-5932-9d59-7668dd7f32bf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-10050 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2026-10051",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:98a40271-70f2-566e-b118-5d190e210632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-10051 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2026-1605",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9ddc2cf0-221f-53b0-bd9d-103ec83e86b0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-1605 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2026-18659",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7a2058fd-2473-5080-904c-678af9a80c93",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-18659 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2026-18660",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9ea56f69-51c7-5b2c-acdc-c2959b29f448",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-18660 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2026-18661",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:89a1fcb4-d3e9-5bd3-8dfd-3986fff298a8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-18661 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2026-18662",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:da7536bc-dcc2-51bd-9287-00a31c243278",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-18662 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2026-19864",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:870467cf-6372-584d-9863-1d3e068aa568",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-19864 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2026-2332",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:441fdafc-730f-5498-b6fd-ce8feab7e085",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-2332 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2026-5795",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4b26dbe1-ef2f-57ef-b884-5064ae2ffe30",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-5795 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2026-6790",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7bdc8212-f544-51b9-bb88-217b7b7313e2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-6790 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2026-8384",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7c902ac7-04c4-59ad-8fd6-e26fa9f75e81",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-8384 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "GHSA-58qw-p7qm-5rvh",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f5095bc2-488c-5cc8-8611-48e003cd562f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server."
      }
    },
    {
      "id": "GHSA-gc59-r5jq-98qw",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fe8df9ad-e1f0-5be3-9ce7-e819298910d0",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-gc59-r5jq-98qw is a false positive for org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server 12.0.22-tuxcare.1."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.eclipse.jetty.ee10.websocket/jetty-ee10-websocket-jakarta-server@12.0.22-tuxcare.1"
    }
  ]
}