{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4a28c51c-ac4c-53d7-9d95-f69bd680c636", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "jetty-ee8-demo-async-rest-server", "purl": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1", "type": "library", "group": "org.eclipse.jetty.ee8.demos", "bom-ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1", "version": "12.0.22-tuxcare.1", "pedigree": { "ancestors": [ { "name": "jetty-ee8-demo-async-rest-server", "purl": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22", "type": "library", "group": "org.eclipse.jetty.ee8.demos", "version": "12.0.22" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2006-6969", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:40aad1ec-bc68-55c4-b52d-d7ab71c45887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2006-6969 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2007-1651", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:a98af689-7e97-5209-a2bb-49bcdca74a1e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2007-1651 does not affect version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server. Target Jetty 12.0.22 is NOT affected. The CVE concerns a CSRF / session-restoration weakness in Jetty's OpenID Connect support; the two vendor patches (5f2c96dc, 2020 \u2014 move ID-token expiry to initial-auth-only + proper logout/validate delegation; e9f260f4, 2021 \u2014 replace the single anti-forgery CSRF token with a per-session, SecureRandom-keyed csrfMap and mandatory `state` validation) are UPSTREAM Jetty fixes authored by lachlan@webtide.com years before the 12.0.22 release (June 2025). Both fix commits are ancestors of HEAD, and the shipped jetty-core/jetty-openid and jetty-ee9/jetty-ee9-openid modules contain the complete post-fix code. The pre-fix vulnerable pattern (single CSRF_TOKEN setAttribute, isExpired() gating session validity, empty logout()) is absent. Not a TuxCare backport \u2014 the fix is native/upstream, so verdict is not_affected (justification code_not_present), not already_fixed.", "justification": "code_not_present" } }, { "id": "CVE-2007-1652", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:fbece90b-b4bd-5869-bcd6-a59a48711844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-1652 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2011-4461", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:87926536-1cbc-5e33-8946-198336b7e190", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4461 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2015-2080", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:fd51a994-62c6-551a-9240-ff02d6138751", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2080 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2016-4800", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:1e4128fb-3d43-528b-a0c6-0916e9669e0b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-4800 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2017-7656", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:b3003ed0-b4f0-52a4-b020-5267e596c814", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7656 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2017-7657", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:94d07d34-64c6-599e-aa90-9cc1a2d5f90f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7657 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2017-7658", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:60b1c8d3-cf2a-5f22-ad66-7c3c56689064", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7658 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2017-9735", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:7c47e501-f373-5b7b-9639-344112663677", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-9735 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2018-12536", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:4a298dc2-f7e9-5145-8d3b-95e5acdc6347", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12536 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2018-12538", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:9a8337ef-68fd-5376-8e4c-d79362b39e22", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12538 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2018-12545", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:458f21cd-b44e-5b89-b2b3-d54539ed1a1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12545 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2019-10241", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:afc6c7c0-09bc-5b8c-b873-f42b7b2c4ce7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10241 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2019-10246", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:1cfe5f98-38f6-5959-8440-a0fcb1a2942c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10246 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2019-10247", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:aa6800fc-2344-5ade-a212-2ea605e218d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10247 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2019-17632", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:f0c42a78-846f-5578-9480-33cf9f010e16", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17632 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2019-17638", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:6d360cf6-f4ca-5c1f-80ac-b6fc79a53d98", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17638 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2020-27218", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:396c76aa-b912-50a9-becd-aca798767e94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27218 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2020-27223", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:a918db85-4b84-57ed-9f1d-f72a65353abb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27223 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2021-28165", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:975e1826-f2e2-5eed-90ee-0d43404d5ecd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28165 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2021-34428", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:475d89db-d72a-5a4c-808b-bc7952b1aace", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-34428 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2022-2047", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:06c8cd61-9b75-54c7-8152-02860bd34641", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2047 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2022-2191", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:4714e880-6c19-5809-b8c3-b63aa3060683", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2191 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2023-26048", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:8d7211fa-9915-56ed-8982-a42c249ea094", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26048 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2023-26049", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:44ee6265-42fe-519b-9dd5-a43fa1c4c543", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26049 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2023-40167", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:3dbf2b7e-4cf8-57ff-bc54-3d94387a93e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40167 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2024-13009", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:62e51972-98a2-5e33-9100-4be4f8e7a996", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-13009 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2024-6763", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ca291fdd-9699-5855-9793-5cad75813a18", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6763 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2024-7708", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:39d2e35d-655c-5ae2-afe8-7a5f8b632f6f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-7708 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2024-8184", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:51f8a58f-d185-520f-8930-2b6a10cf6c45", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-8184 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2025-11143", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:b90ebffe-1c1b-547c-b5df-ef05299cf052", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-11143 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2026-10050", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:83568563-1859-51c8-a01f-5f95454ec0e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-10050 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2026-10051", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:7c710876-43ac-52e1-9374-a6f0ae0e2ce1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10051 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2026-1605", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:4719a963-0347-5e68-98fe-7a092d860efc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1605 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2026-18659", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:93939a99-4f7b-5ffb-a09a-7a77b47bfa5c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18659 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2026-18660", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:60bb54d8-3970-5a12-8c06-9116208ce494", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18660 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2026-18662", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:86cebd4d-92cd-5a2f-bc17-8db50395ffc0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18662 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2026-19864", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:33f555b1-a470-527a-9725-7b69aebefc48", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-19864 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2026-2332", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:a03c4aa2-2589-5c20-b38f-ff39c23614c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-2332 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2026-6790", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c3f510bb-0ee5-5b07-9ec3-e552d5ee894f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6790 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "CVE-2026-8384", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c82690f5-6481-59d4-b107-5ba6db03d07f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-8384 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } }, { "id": "GHSA-58qw-p7qm-5rvh", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:42e5f003-f3f0-5cc2-a4e0-389901b996f9", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-async-rest-server." } } ], "dependencies": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-async-rest-server@12.0.22-tuxcare.1" } ] }