{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e00fe6e9-397d-5d00-b6a7-2f93888d1c9a", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "jetty-ee10", "purl": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1", "type": "library", "group": "org.eclipse.jetty.ee10", "bom-ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1", "version": "12.0.22-tuxcare.1", "pedigree": { "ancestors": [ { "name": "jetty-ee10", "purl": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22", "type": "library", "group": "org.eclipse.jetty.ee10", "version": "12.0.22" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2006-6969", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:53108594-e4e1-521b-a066-1f5cc3b73b5a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2006-6969 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2007-1651", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:0626c6f1-7f8b-5f52-b060-049415c6392c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2007-1651 does not affect version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10. Target Jetty 12.0.22 is NOT affected. The CVE concerns a CSRF / session-restoration weakness in Jetty's OpenID Connect support; the two vendor patches (5f2c96dc, 2020 \u2014 move ID-token expiry to initial-auth-only + proper logout/validate delegation; e9f260f4, 2021 \u2014 replace the single anti-forgery CSRF token with a per-session, SecureRandom-keyed csrfMap and mandatory `state` validation) are UPSTREAM Jetty fixes authored by lachlan@webtide.com years before the 12.0.22 release (June 2025). Both fix commits are ancestors of HEAD, and the shipped jetty-core/jetty-openid and jetty-ee9/jetty-ee9-openid modules contain the complete post-fix code. The pre-fix vulnerable pattern (single CSRF_TOKEN setAttribute, isExpired() gating session validity, empty logout()) is absent. Not a TuxCare backport \u2014 the fix is native/upstream, so verdict is not_affected (justification code_not_present), not already_fixed.", "justification": "code_not_present" } }, { "id": "CVE-2007-1652", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:12211786-bac2-54b4-8d36-04fd1edd0952", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-1652 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2011-4461", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:8a1ab673-d958-5fb1-9c5c-4700323c2404", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4461 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2015-2080", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:994afe0e-aeb9-5f1f-867e-31e4382e0073", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2080 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2016-4800", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:15c6a833-7c24-569f-aec3-820958b1c1e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-4800 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2017-7656", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c00024d5-15c5-52f2-9911-f7e46820ed08", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7656 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2017-7657", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:2fa262bd-0dee-5882-8234-86aabe9ce202", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7657 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2017-7658", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:e421021f-35ba-5645-97cc-7993e59cda2a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7658 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2017-9735", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:df36f200-1181-5f8f-9f5e-95fea266705f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-9735 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2018-12536", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:e7c47036-1aa9-5fb6-aff5-122fc80cab55", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12536 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2018-12538", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:f552e34a-0926-54e3-a562-dda7857ccadc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12538 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2018-12545", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:f4ca6960-5db1-50a4-9b97-d3827dc26515", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12545 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2019-10241", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ebf87bf2-af1b-5987-80fb-6cf8def15ac0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10241 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2019-10246", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:0daabfe5-b9e0-57aa-a21e-45c00dfe66d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10246 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2019-10247", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:a2270fa7-7fdc-5368-a3e1-a9888ad76b27", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10247 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2019-17632", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c18ba98e-7d46-580a-8bd3-975c5bbd2d60", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17632 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2019-17638", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:3aebe15b-ebb5-5ece-8f02-750f7118a6b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17638 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2020-27218", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:6196cb6f-691e-5d56-bae5-2d65a0bbc03b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27218 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2020-27223", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:67477cdb-0254-5650-a2d0-a79bccf0568d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27223 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2021-28163", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:a3d175da-c7c6-5ee1-ba92-a1e2f0ec688c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28163 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2021-28165", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:d7f61d7d-e9fe-5914-aef2-2a74e8be1606", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28165 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2021-34428", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:cd0733a0-6814-5b5f-9903-91dec112d6aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-34428 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2022-2047", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:4fa6582d-ee7e-5df8-8065-9852e4cb1efd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2047 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2022-2191", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:3f6bd7dc-4d74-56da-8680-8637dc1389b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2191 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2023-26048", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:6e5d532d-b4e8-582f-8387-bcd0a457493d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26048 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2023-26049", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:458cc864-6aec-5542-bc95-be4299a24060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26049 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2023-36479", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:b8d1d7c8-cb3a-5301-b915-dbc5ae8118be", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36479 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2023-40167", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:e4f9c9da-ca4f-5335-96e9-c920ab0ba872", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40167 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2023-41900", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:fbb9f283-9ed8-5666-a1c2-69fac7d14de4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41900 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2023-44487", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:5f80f9d2-119b-5047-a89d-eceedebe75a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-44487 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2024-13009", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:7ffbc3f2-20b4-5848-87bc-a4a1495f9936", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-13009 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2024-22201", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:fbb63c0d-1824-5fec-8f28-0c3513cc0fd8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22201 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2024-6763", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:bd4a4d4a-a5da-5d8b-9b4c-1feae35f4070", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6763 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2024-7708", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:bfeb4308-fbfa-5829-a12d-46b3e1236b8a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-7708 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2024-8184", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:67baecd7-4a9d-5df8-bc6e-4d88ec998085", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-8184 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2024-9823", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:24a18c98-0dfd-5fc4-a79e-5140e6859e3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9823 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2025-11143", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ae7c5275-d700-5b29-af40-637f82110cd9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-11143 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2025-1948", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:d7c2a1fb-3fe4-5b28-887f-bcaff5262f3f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-1948 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2025-5115", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:91fb4d62-6b91-58f9-ab4f-90feca0cbebc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-5115 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2026-10050", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ae12ba86-9510-5545-9fb0-b0891bdaf5da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-10050 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2026-10051", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:65f1ee48-6aa1-54db-814c-47c559bf2fb6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10051 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2026-1605", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:9eb9231a-fcb6-5e0d-8253-0972385c70b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1605 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2026-18659", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c252322f-b5f2-591b-9bd3-995155b6a751", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18659 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2026-18660", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:1087f3c1-7224-53ed-9b8d-50b2673ee442", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18660 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2026-18661", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:61b493c4-5d63-5549-8868-3295559f1f6c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18661 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2026-18662", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:d0ae5967-c234-5cbd-93ab-da8b8e6f5fa9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18662 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2026-19864", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:eb88f0ca-f34f-5286-a915-36b481ff2a12", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-19864 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2026-2332", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:b31b7b69-3a08-5aac-af74-c37b3149c9e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-2332 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2026-5795", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:5f246aad-8a97-50cc-8c6a-775825547677", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-5795 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2026-6790", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:82029596-3c36-5844-81e6-f6625397ecc6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6790 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "CVE-2026-8384", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:e720b904-20dd-57a2-91c6-5171a57f1fb9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-8384 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "GHSA-58qw-p7qm-5rvh", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:16d6572e-0f36-5165-9b0d-dbd9c5ceb5df", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee10:jetty-ee10." } }, { "id": "GHSA-gc59-r5jq-98qw", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c3c6b142-94e8-5afb-84e8-bcc0cf77a2e3", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-gc59-r5jq-98qw is a false positive for org.eclipse.jetty.ee10:jetty-ee10 12.0.22-tuxcare.1." } } ], "dependencies": [ { "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10@12.0.22-tuxcare.1" } ] }