{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:dc15be2f-71e4-55cc-9b07-3beff2c45504", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "jetty-ee8-demo-jetty-webapp", "purl": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1", "type": "library", "group": "org.eclipse.jetty.ee8.demos", "bom-ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1", "version": "12.0.22-tuxcare.1", "pedigree": { "ancestors": [ { "name": "jetty-ee8-demo-jetty-webapp", "purl": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22", "type": "library", "group": "org.eclipse.jetty.ee8.demos", "version": "12.0.22" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2006-6969", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:52a846a4-fd2d-5804-b4a6-8dc714ded755", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2006-6969 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2007-1651", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:8b07fcb6-88fc-5a10-b5cb-f4f3503264ad", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2007-1651 does not affect version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp. Target Jetty 12.0.22 is NOT affected. The CVE concerns a CSRF / session-restoration weakness in Jetty's OpenID Connect support; the two vendor patches (5f2c96dc, 2020 \u2014 move ID-token expiry to initial-auth-only + proper logout/validate delegation; e9f260f4, 2021 \u2014 replace the single anti-forgery CSRF token with a per-session, SecureRandom-keyed csrfMap and mandatory `state` validation) are UPSTREAM Jetty fixes authored by lachlan@webtide.com years before the 12.0.22 release (June 2025). Both fix commits are ancestors of HEAD, and the shipped jetty-core/jetty-openid and jetty-ee9/jetty-ee9-openid modules contain the complete post-fix code. The pre-fix vulnerable pattern (single CSRF_TOKEN setAttribute, isExpired() gating session validity, empty logout()) is absent. Not a TuxCare backport \u2014 the fix is native/upstream, so verdict is not_affected (justification code_not_present), not already_fixed.", "justification": "code_not_present" } }, { "id": "CVE-2007-1652", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:bccafc49-5f26-5bcb-8398-7491176d8fc1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-1652 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2011-4461", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:64c4984d-94d7-50fd-b830-481a9c6573dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4461 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2015-2080", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:f4d08e91-de24-528f-94e9-052a041a88ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2080 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2016-4800", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:eb55aacf-bc46-5944-b7ea-b869e89ec4ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-4800 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2017-7656", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:8caf0b3b-08f6-595f-8138-60010f678b2a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7656 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2017-7657", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:b910e7ae-2535-55f3-b41b-f9560e60c1f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7657 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2017-7658", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c099fca1-e8b2-5366-bbf6-c750c70a7aa4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7658 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2017-9735", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:513e691a-f601-52ff-9855-927d7301a7aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-9735 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2018-12536", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:4edc8d69-c86e-58fe-b5f7-dad658ccea3e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12536 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2018-12538", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:3af64bc8-fbfb-5994-88a3-fa0fa1f9aa70", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12538 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2018-12545", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:83741c1b-6d49-501d-b641-6edb858a6348", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12545 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2019-10241", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:42549325-b386-50f9-aa6a-335bcdc4ccf7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10241 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2019-10246", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:69f0b593-8b5b-5295-8f1c-4a169a320375", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10246 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2019-10247", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:334830b9-fae4-515c-832a-357a54b17d68", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10247 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2019-17632", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:6c2118e5-b8e6-5212-b324-a61566724dc4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17632 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2019-17638", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:7a674cfa-2856-51cc-aaef-52baf13ad906", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17638 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2020-27218", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:4d4e0db7-9981-5a79-9099-443168f467aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27218 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2020-27223", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:351d2e8c-2761-5e91-a6ba-b92cde53717e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27223 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2021-28165", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:06e34ad3-f050-5280-8e21-b051d9ca1bcf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28165 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2021-34428", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:69880933-c9e3-5c51-85a8-6f4b67c379b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-34428 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2022-2047", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:d4d2bfa3-3b39-51d9-a998-acd4aa01d0bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2047 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2022-2191", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:d586428f-96e8-5692-a2b1-69a88eb03fbc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2191 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2023-26048", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:330ef7f9-a99d-545c-9bae-dee2519bcd49", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26048 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2023-26049", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c1542b4b-7f5e-56fe-a423-3ea5d1e4a1b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26049 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2023-36479", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:f2dcb109-650b-5dac-8de9-04db5f75b1cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36479 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2023-40167", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ff3c0ecf-5f43-593b-b971-0a71f4158ba3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40167 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2024-13009", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:fd6ea619-2d45-558a-8c7f-eb23b8be486f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-13009 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2024-6763", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:2b79166c-8582-53c9-b8f0-cd9b32becc88", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6763 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2024-7708", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ff4b2b9f-57b9-5d51-a239-c04c6e2b1ec9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-7708 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2024-8184", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c8d0e5bb-4102-5e59-8da5-8aad27109a2b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-8184 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2024-9823", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:777a7fe2-2a15-55e7-8a94-084e3b534625", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9823 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2025-11143", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ca4a0d42-1e15-5b57-bed0-29f777bedab6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-11143 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2026-10050", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:d61e850b-b262-5fac-86a3-e6fe4c252eff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-10050 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2026-10051", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:675dda3a-dd75-57c5-acd7-476b7a74ec2b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10051 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2026-1605", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:f312662f-6535-52dc-9ad3-ce07b8cacd61", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1605 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2026-18659", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:5730cf6b-1f94-5989-a594-bfbd08519bb4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18659 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2026-18660", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:4496075d-17d8-556e-8faa-7ae7e0b04f3e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18660 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2026-18661", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:303183e5-9751-5541-8b9d-99a5d4fe15d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18661 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2026-18662", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:8c0b0105-d30d-59c9-aee2-12c1927bac0b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18662 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2026-19864", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:fa9a355f-fa8b-57f9-a57b-6e1570a4c105", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-19864 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2026-2332", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:27ff8312-e826-5cd7-9606-5fc23802cc3d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-2332 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2026-6790", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:918b9636-f0d7-56d6-a77b-3a5b59d9cda7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6790 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } }, { "id": "CVE-2026-8384", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:16310ea7-0693-550f-b1db-da4ff45a87a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-8384 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp." } } ], "dependencies": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.demos/jetty-ee8-demo-jetty-webapp@12.0.22-tuxcare.1" } ] }