{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:0cd1a711-3380-5fce-b4a4-030a3d19e767",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "jetty-ee8-websocket-javax-common",
      "purl": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1",
      "type": "library",
      "group": "org.eclipse.jetty.ee8.websocket",
      "bom-ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1",
      "version": "12.0.22-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "jetty-ee8-websocket-javax-common",
            "purl": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22",
            "type": "library",
            "group": "org.eclipse.jetty.ee8.websocket",
            "version": "12.0.22"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2006-6969",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:67490b18-7620-50c6-9449-388a21bc4116",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2006-6969 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2007-1651",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f395aff8-28ea-5541-bcb9-44cf3eb6d303",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2007-1651 does not affect version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common. Target Jetty 12.0.22 is NOT affected. The CVE concerns a CSRF / session-restoration weakness in Jetty's OpenID Connect support; the two vendor patches (5f2c96dc, 2020 \u2014 move ID-token expiry to initial-auth-only + proper logout/validate delegation; e9f260f4, 2021 \u2014 replace the single anti-forgery CSRF token with a per-session, SecureRandom-keyed csrfMap and mandatory `state` validation) are UPSTREAM Jetty fixes authored by lachlan@webtide.com years before the 12.0.22 release (June 2025). Both fix commits are ancestors of HEAD, and the shipped jetty-core/jetty-openid and jetty-ee9/jetty-ee9-openid modules contain the complete post-fix code. The pre-fix vulnerable pattern (single CSRF_TOKEN setAttribute, isExpired() gating session validity, empty logout()) is absent. Not a TuxCare backport \u2014 the fix is native/upstream, so verdict is not_affected (justification code_not_present), not already_fixed.",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2007-1652",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:53853db9-2b6f-590e-a43d-889d7e186fec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-1652 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2011-4461",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5b94380d-21bf-5a8a-b9aa-78ba96890894",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-4461 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2015-2080",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f0855b1f-8d95-5b6b-9f31-bce0a5d745a9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-2080 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2016-4800",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fb571022-2bde-5a7e-a391-b493cf981d6c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-4800 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2017-7656",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b9526a2e-c783-5b01-b49d-daf1fca167ea",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7656 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2017-7657",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:38463325-b3a3-5d52-8ff8-28ea84cf1abb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7657 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2017-7658",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:90fc5a08-a5cc-5f94-975a-709aeb05289f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7658 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2017-9735",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2f9a0bae-a828-503a-88b6-2d853b21ebbb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-9735 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2018-12536",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9a7f5346-d279-53b8-8905-7ec328b2a11c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-12536 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2018-12538",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2ec7c80a-b8fc-59b3-aec6-a4721f5c7007",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-12538 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2018-12545",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:78659b99-0d89-5c88-9b5b-4a3d2624c748",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-12545 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2019-10241",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4c32c2c3-98d1-5b52-8c98-3c8982ec1584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10241 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2019-10246",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:34e77183-d382-5e8a-a10e-b89b6b3c7eba",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10246 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2019-10247",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e6d09e66-570f-50bd-9243-af851d16dbd2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10247 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2019-17632",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a6b70502-864f-5986-bce1-78ca513614e0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-17632 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2019-17638",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f0eeba19-d50c-5c66-af69-235b2dd9338d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-17638 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2020-27218",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0b15253c-850e-5c88-9cae-863f30aea1f8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27218 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2020-27223",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e57d87dc-3422-57f8-9c8f-4c629eb87bbc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27223 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2021-28163",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:99e87646-102f-5529-befc-8266dc2b2704",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28163 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2021-28165",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cb77dd9f-f025-5e6d-b96f-e6dec0a6c36f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28165 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2021-34428",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9d4786f0-467c-5fed-8b39-297d83e5ad42",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-34428 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2022-2047",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:af68f46c-840f-5858-83e6-d313b0f620ae",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-2047 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2022-2191",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5d5cc42f-6f83-5385-9546-21c0c166ca60",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-2191 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2023-26048",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:59136745-0b7f-5e2b-afca-de65ad9e05ed",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-26048 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2023-26049",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:067ef0d5-7f2d-55c4-b811-af2cd54b5b1f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-26049 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2023-36479",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8ba43b40-c099-5511-b866-eb0a04d4a595",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36479 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2023-40167",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fcd198ff-2798-5f7f-922e-77f6af2208d9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40167 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2023-41900",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cb3772d6-37b7-50a8-98bf-9b03fed3586a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-41900 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2023-44487",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:602e5323-6492-5e69-8d3f-e4bf37a8318b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2024-13009",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2f5bc242-79f7-55e4-ae47-8ca06c44f083",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-13009 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2024-22201",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:214ede20-44dd-579b-ba27-388d6c3e0693",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22201 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2024-6763",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1d865591-b878-5d1f-860f-177c9d695742",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6763 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2024-7708",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:eb1b6c71-3b9e-5190-aea9-a7b9052c2bab",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-7708 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2024-8184",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:eb021eab-e632-586e-989e-da8c31c5d0b6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-8184 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2024-9823",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ad5728e4-2133-54a9-9ecc-6e6023c21d89",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-9823 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2025-11143",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:614eb3ba-6b7b-56db-a59b-6615d213430d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-11143 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2025-1948",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a959ccc2-0137-5dde-a4d8-5079b0fa9b26",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-1948 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2025-5115",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9b13e50a-0126-51d4-aa61-09c9c88059d6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-5115 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2026-10050",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:045bcf94-2ef0-56f7-bbfc-cbab022c839e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-10050 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2026-10051",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:97f346f6-ae37-5ffb-8d1c-4f317b076909",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-10051 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2026-1605",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:38dce5f8-5553-5755-9fff-cd154a6b868a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-1605 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2026-18659",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:735fe095-39c9-5aeb-8c20-3e57ea4f21dc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-18659 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2026-18660",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a5449818-3246-5971-8aa1-6051f483affd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-18660 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2026-18661",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7e8ba43a-9cd3-56c3-9a1d-480671784dc5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-18661 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2026-18662",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8afdba81-5fb4-56ae-946d-d3b6e7751113",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-18662 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2026-19864",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fdf418f6-a4f3-5ef3-8b80-b39f0256262a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-19864 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2026-2332",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8f5358c0-e70c-53b8-8004-604d24ca9c64",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-2332 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2026-5795",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:99fdd2e7-babd-5a2f-bdfa-1fe36fd66e4b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-5795 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2026-6790",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b394a5f0-623d-5e79-abd0-cc77d36abe70",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-6790 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "CVE-2026-8384",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5b88d355-8283-5211-9898-4d59bb7bd150",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-8384 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "GHSA-58qw-p7qm-5rvh",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f0e387b6-76fa-5883-b79d-f37a4a37de81",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common."
      }
    },
    {
      "id": "GHSA-gc59-r5jq-98qw",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c07d3e05-9679-539e-93ee-dd029f946dd6",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-gc59-r5jq-98qw is a false positive for org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common 12.0.22-tuxcare.1."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-javax-common@12.0.22-tuxcare.1"
    }
  ]
}