{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b5c7de30-bd87-553a-83e3-9d9c47a29f3d",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "jetty-ee8-websocket-jetty-client-webapp",
      "purl": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1",
      "type": "library",
      "group": "org.eclipse.jetty.ee8.websocket",
      "bom-ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1",
      "version": "12.0.22-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "jetty-ee8-websocket-jetty-client-webapp",
            "purl": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22",
            "type": "library",
            "group": "org.eclipse.jetty.ee8.websocket",
            "version": "12.0.22"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2006-6969",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1ed36533-3dc2-58b6-b94c-79d4a7ff0ff2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2006-6969 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2007-1651",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:200be26c-c264-5496-8e15-fa78d96e4bc4",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2007-1651 does not affect version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp. Target Jetty 12.0.22 is NOT affected. The CVE concerns a CSRF / session-restoration weakness in Jetty's OpenID Connect support; the two vendor patches (5f2c96dc, 2020 \u2014 move ID-token expiry to initial-auth-only + proper logout/validate delegation; e9f260f4, 2021 \u2014 replace the single anti-forgery CSRF token with a per-session, SecureRandom-keyed csrfMap and mandatory `state` validation) are UPSTREAM Jetty fixes authored by lachlan@webtide.com years before the 12.0.22 release (June 2025). Both fix commits are ancestors of HEAD, and the shipped jetty-core/jetty-openid and jetty-ee9/jetty-ee9-openid modules contain the complete post-fix code. The pre-fix vulnerable pattern (single CSRF_TOKEN setAttribute, isExpired() gating session validity, empty logout()) is absent. Not a TuxCare backport \u2014 the fix is native/upstream, so verdict is not_affected (justification code_not_present), not already_fixed.",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2007-1652",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:16db1204-f1b5-562f-ab3a-46c621a4a9d4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-1652 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2011-4461",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d5b68b94-4697-5769-a99e-af90de20cb3b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-4461 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2015-2080",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3025d8bf-179b-5c52-b230-9729e3f764ce",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-2080 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2016-4800",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0ea5eca5-6284-569d-a6b4-b70bcecf56ed",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-4800 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2017-7656",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f4490e25-6e55-5470-b692-b938ccda48db",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7656 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2017-7657",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a7c3f0f0-38b8-5c37-8f99-461864fa5b49",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7657 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2017-7658",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8838a367-cef9-59f0-8163-43196357c910",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7658 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2017-9735",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ec63b3fd-b2ab-501c-a2d5-fdc16eae8443",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-9735 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2018-12536",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:66328a9d-dc7d-560c-84f2-0648ee8344fa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-12536 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2018-12538",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9f1fdedf-e34a-56b6-888c-970cb48aa699",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-12538 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2018-12545",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:80ce33b0-0cde-517f-9790-209f93f22b94",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-12545 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2019-10241",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:05f6494b-2861-5896-8372-afc4e35cbe42",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10241 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2019-10246",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a1f99855-3a2d-5e14-84f7-cd53e0ecc614",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10246 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2019-10247",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3fbfba4b-d5d1-595c-bc7f-0b59acc028dd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10247 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2019-17632",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2df404be-1a44-5525-97a5-d8bc9035a803",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-17632 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2019-17638",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5ead5547-e6fb-54ae-86e8-bfbe94d9c7ac",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-17638 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2020-27218",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:80892323-d7e6-59cd-bef9-a85f07ea5ea6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27218 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2020-27223",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:087b12e9-ba8e-5034-bb46-938dbd60260d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27223 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2021-28163",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:20b1950c-84a4-5df3-8d6e-ce44b9d33900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28163 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2021-28165",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2e3198dc-adff-5872-b096-83e94f3095e6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28165 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2021-34428",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7b497dd1-cf3a-5021-9a67-680cbf145f36",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-34428 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2022-2047",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:326b6aab-2264-5594-aa15-eca86e18173f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-2047 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2022-2191",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f6fe74bc-57e1-574e-bd31-b268011f9f9e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-2191 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2023-26048",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0668e73b-08cd-5a24-8cff-318b8df88faa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-26048 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2023-26049",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d9c5bb1d-8607-5bc5-a1c5-d5be0c2fb033",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-26049 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2023-36479",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:459e5232-d882-5aeb-ae44-48d41b39c23b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36479 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2023-40167",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8622d508-7699-5db4-822b-96c8c2fe108f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40167 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2023-41900",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3d403cc4-9c48-562a-a59a-63f8b078e332",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-41900 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2023-44487",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c90cd83f-0170-5905-8100-5abd88fbfaca",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2024-13009",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2e492c81-8021-5d88-bfa8-d94d1bf71221",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-13009 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2024-22201",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c6b3002f-4340-5fba-89cc-2fa823122875",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22201 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2024-6763",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3d800ee5-a65d-5ae3-9ecb-f009602392e4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6763 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2024-7708",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ee1ae0b4-7138-52be-9087-990b73398f2f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-7708 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2024-8184",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cd8dde4d-03db-59ff-82f1-19cdf5032d77",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-8184 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2024-9823",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aa43205c-7ade-55ed-93b9-4093af7e75a4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-9823 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2025-11143",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5c6cd58d-84b6-58d7-8f72-353623af6c25",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-11143 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2025-1948",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:462d688b-6f66-5996-ac41-6349cc1ede82",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-1948 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2025-5115",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:21b68885-24e9-5678-a94e-1b190d86277b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-5115 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2026-10050",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f0e01234-2002-5162-8006-4ed8e21cd820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-10050 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2026-10051",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1a7e66ef-97c3-56fa-84c7-af159f9e53c8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-10051 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2026-1605",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f170269b-d7f0-51be-827f-b48bebbef150",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-1605 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2026-18659",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:30882647-e766-5339-b347-24b9abea5f31",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-18659 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2026-18660",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:84bbbc77-3314-54dc-a22d-14f62fa4a8d4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-18660 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2026-18661",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1548dfad-42fe-5da9-93d3-ed08d031b835",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-18661 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2026-18662",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fbc721f9-5f4d-59fd-9549-0e9ab0cfdcd7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-18662 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2026-19864",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a105c24f-d0c7-5ab2-9fac-50eb893dc837",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-19864 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2026-2332",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:42935b2c-045a-5a6b-a88c-f45806e5cce9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-2332 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2026-5795",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:93e42cfc-bd3a-51a6-9b81-45a46fe50f93",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-5795 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2026-6790",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8a77fc58-c79d-5b83-a374-d2af605ff445",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-6790 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "CVE-2026-8384",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:43445e6c-90f0-57b3-bb67-d381de11e0be",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-8384 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "GHSA-58qw-p7qm-5rvh",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7e6e1e82-8baa-5552-b12d-729c6ddc4a0b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp."
      }
    },
    {
      "id": "GHSA-gc59-r5jq-98qw",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e166599a-a0e7-5cf2-9294-c0cd54418c4d",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-gc59-r5jq-98qw is a false positive for org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-client-webapp 12.0.22-tuxcare.1."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-jetty-client-webapp@12.0.22-tuxcare.1"
    }
  ]
}