{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d8e01a42-8abd-54df-9113-bbc026bc25bd",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "jetty-ee8-websocket-javax-client",
      "purl": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1",
      "type": "library",
      "group": "org.eclipse.jetty.ee8.websocket",
      "bom-ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1",
      "version": "12.0.22-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "jetty-ee8-websocket-javax-client",
            "purl": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22",
            "type": "library",
            "group": "org.eclipse.jetty.ee8.websocket",
            "version": "12.0.22"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2006-6969",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6e637cae-b0f4-5595-8a35-1cc1e4918a32",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2006-6969 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2007-1651",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d1b097d2-e33d-51ce-9d6e-a90b593b6193",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2007-1651 does not affect version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client. Target Jetty 12.0.22 is NOT affected. The CVE concerns a CSRF / session-restoration weakness in Jetty's OpenID Connect support; the two vendor patches (5f2c96dc, 2020 \u2014 move ID-token expiry to initial-auth-only + proper logout/validate delegation; e9f260f4, 2021 \u2014 replace the single anti-forgery CSRF token with a per-session, SecureRandom-keyed csrfMap and mandatory `state` validation) are UPSTREAM Jetty fixes authored by lachlan@webtide.com years before the 12.0.22 release (June 2025). Both fix commits are ancestors of HEAD, and the shipped jetty-core/jetty-openid and jetty-ee9/jetty-ee9-openid modules contain the complete post-fix code. The pre-fix vulnerable pattern (single CSRF_TOKEN setAttribute, isExpired() gating session validity, empty logout()) is absent. Not a TuxCare backport \u2014 the fix is native/upstream, so verdict is not_affected (justification code_not_present), not already_fixed.",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2007-1652",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5cd7c670-3312-5a58-bbf9-ed38cb01ee0c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-1652 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2011-4461",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2e0fcc96-e4da-547e-b453-0b9d02f4b7e4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-4461 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2015-2080",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:eed31312-71ac-5aac-b794-75a741823dff",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-2080 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2016-4800",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d6a3388c-89f9-5ac5-bbf8-f8bddf40fb9e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-4800 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2017-7656",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2424da5e-f93e-51a1-93a4-a4a970b61696",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7656 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2017-7657",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d1a1d3ba-419d-5b81-9ead-6ce26d726fea",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7657 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2017-7658",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4c7e3b68-1398-5a14-975c-3adb3836876f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7658 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2017-9735",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0b3f8188-74d2-5cf9-ac53-3b12e6c4f3eb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-9735 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2018-12536",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5aa89562-f7a2-58a8-8736-9f8aef0e14f5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-12536 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2018-12538",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b3a6ad70-a5e3-53ce-a3c2-695a30ff5eb5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-12538 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2018-12545",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:526136b1-3110-5bb4-85f6-f7f205b4476c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-12545 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2019-10241",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f0192778-f86a-5ad6-95dc-00d5d4a8c264",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10241 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2019-10246",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f42665e3-79d7-5e62-89a1-02c7416f88ed",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10246 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2019-10247",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2a68996e-f372-5fbf-865c-b8b78244dc8c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10247 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2019-17632",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9344b395-0bf9-549e-9b74-3993fb70b7f9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-17632 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2019-17638",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:97ed2e11-821a-5cc5-806f-1b23157d4bdc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-17638 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2020-27218",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:414fbb25-104d-577c-be00-267404b91782",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27218 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2020-27223",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9c83f79e-fb0f-5e65-80ad-9e8ee29288df",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27223 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2021-28163",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:54b960ed-b4a5-5ac1-9988-0bc50ac9057f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28163 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2021-28165",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c65b1295-da36-5dda-8cc7-0cc5ee1cf8fd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28165 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2021-34428",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:287e674b-2dcb-5ad0-a0e5-270d93a02759",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-34428 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2022-2047",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8f8f0775-627b-520a-95a2-3c27d1d0bd98",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-2047 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2022-2191",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b297d473-4927-5245-93b1-23788a994e9d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-2191 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2023-26048",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:78850a55-a3b4-5923-8f37-82a8c1425dbf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-26048 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2023-26049",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9a8e4840-a580-5988-927a-75cc4503cd2d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-26049 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2023-36479",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:911e4518-2254-5dc8-b580-5b857d043997",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36479 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2023-40167",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:181b2dc9-2364-5cb4-b708-d16747ec7406",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40167 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2023-41900",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:de21538a-f64d-568b-a25c-3095ef85fd51",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-41900 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2023-44487",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:89eafcbb-a297-561f-95e9-c8dcac9a3a40",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2024-13009",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0471e60c-28e2-5d3d-975b-fbc8d86a2176",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-13009 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2024-22201",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4270c05c-1b00-5ef9-a982-6b74ed080056",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22201 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2024-6763",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:713ea996-5e8f-52fb-bf26-186aabfe845b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6763 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2024-7708",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6da2cf6c-553b-54f5-9f5e-b7e504c933a5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-7708 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2024-8184",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9fd8f147-f3a7-5736-9e51-1733dda654ab",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-8184 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2024-9823",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:efdadc61-03e7-5d20-8d5d-2c2c37ccf7e2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-9823 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2025-11143",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3fc5fa00-8a0c-5579-8e79-4ea6bb1ec268",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-11143 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2025-1948",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4202170a-1dd3-5e46-911f-362f70823b0e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-1948 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2025-5115",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:65a5e3b6-ab99-5c27-a1e6-34a2d973e823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-5115 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2026-10050",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b54765e8-3df6-55d2-9060-43ce311cecb9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-10050 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2026-10051",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c72d5441-53cd-5857-a9a6-080f01c3f19a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-10051 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2026-1605",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:285dfc5a-21c4-5583-88e8-307ffdb7a06f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-1605 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2026-18659",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bf9955bd-954b-5715-a55b-f392fb6d9c2a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-18659 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2026-18660",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:73987c0d-4d1b-58cc-9db0-f28264296b5f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-18660 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2026-18661",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a32af8f0-66dc-5ded-a23d-6bc35bd25327",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-18661 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2026-18662",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f344dca7-cebc-5d33-819d-9ce41372b84e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-18662 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2026-19864",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b2fb8942-65b7-51b9-a715-5c1d813053de",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-19864 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2026-2332",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ef57eddb-18b4-5f4e-a709-c0d55a7c711d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-2332 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2026-5795",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d51740ea-e607-5862-916b-d3561f0b5226",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-5795 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2026-6790",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7088bdd5-1a53-5f98-b5c3-66e8ed3fd5d3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-6790 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "CVE-2026-8384",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:62b18fcb-1a7c-5a17-824e-84b5781cc8a4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-8384 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "GHSA-58qw-p7qm-5rvh",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:112b499f-cb8c-5d12-ab70-648b1e9dbc08",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client."
      }
    },
    {
      "id": "GHSA-gc59-r5jq-98qw",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dbb520d3-0e34-58ff-bd9d-0cca7441188d",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-gc59-r5jq-98qw is a false positive for org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client 12.0.22-tuxcare.1."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-client@12.0.22-tuxcare.1"
    }
  ]
}