{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5dacffab-c573-5121-b2b2-fe99845386e8", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "jetty-ee8-websocket-servlet", "purl": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1", "type": "library", "group": "org.eclipse.jetty.ee8.websocket", "bom-ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1", "version": "12.0.22-tuxcare.1", "pedigree": { "ancestors": [ { "name": "jetty-ee8-websocket-servlet", "purl": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22", "type": "library", "group": "org.eclipse.jetty.ee8.websocket", "version": "12.0.22" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2006-6969", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:5789d486-94a0-56a0-8b17-46fb9dca6d12", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2006-6969 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2007-1651", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:90b952ad-f573-5e4b-a93d-45af162c59a8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2007-1651 does not affect version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet. Target Jetty 12.0.22 is NOT affected. The CVE concerns a CSRF / session-restoration weakness in Jetty's OpenID Connect support; the two vendor patches (5f2c96dc, 2020 \u2014 move ID-token expiry to initial-auth-only + proper logout/validate delegation; e9f260f4, 2021 \u2014 replace the single anti-forgery CSRF token with a per-session, SecureRandom-keyed csrfMap and mandatory `state` validation) are UPSTREAM Jetty fixes authored by lachlan@webtide.com years before the 12.0.22 release (June 2025). Both fix commits are ancestors of HEAD, and the shipped jetty-core/jetty-openid and jetty-ee9/jetty-ee9-openid modules contain the complete post-fix code. The pre-fix vulnerable pattern (single CSRF_TOKEN setAttribute, isExpired() gating session validity, empty logout()) is absent. Not a TuxCare backport \u2014 the fix is native/upstream, so verdict is not_affected (justification code_not_present), not already_fixed.", "justification": "code_not_present" } }, { "id": "CVE-2007-1652", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:0cb80bcf-30b7-5e2f-bdc6-8d0c60460a92", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-1652 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2011-4461", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:92a4d077-5a28-56cd-af9f-c97b2f8970c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4461 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2015-2080", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:03a50583-ec6d-50bf-84a3-6cea734ffe1b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2080 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2016-4800", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:6b051107-27e1-5ba4-9960-ae0e21f30dbe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-4800 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2017-7656", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:d58831f3-72e3-5d21-9191-91a8ca616324", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7656 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2017-7657", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:07a70eb7-05e4-536f-bab2-fade03afa130", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7657 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2017-7658", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:7051e7b4-605f-5558-b94f-61a77eb57f2b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7658 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2017-9735", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:1f47080a-b643-5e01-a0a0-57a340d02933", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-9735 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2018-12536", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ab98116d-6ae8-56d7-b40d-772888a2be58", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12536 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2018-12538", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:96b77415-8bee-5225-bb7e-9685dac5be3a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12538 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2018-12545", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:1c16ad31-4e02-5ccf-a74b-40209513e24b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12545 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2019-10241", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:f0725258-ad2d-55c2-8b1d-be76671aa21f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10241 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2019-10246", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c0184d27-ef8f-5b3c-ab3d-1ee563678817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10246 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2019-10247", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:a79e2466-4956-5b9d-8071-d8783a4b875e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10247 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2019-17632", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:53c1e9f7-b296-5fae-9345-b1d4745d593b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17632 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2019-17638", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:4caa4937-341c-59e4-9299-9d6a9eb32189", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17638 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2020-27218", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:d59bdf12-366a-5e3b-8d8a-7a71d95c0e54", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27218 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2020-27223", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:793662f6-3242-5920-a7ce-5ab5252ab292", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27223 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2021-28165", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:28214153-a288-51f0-aef5-35b1f1169c83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28165 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2021-34428", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ab85f095-52cc-5913-81a6-a10cfd8f7b5a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-34428 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2022-2047", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:d50d472e-c8c5-5c23-af8f-855ff345e380", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2047 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2022-2191", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c3dea700-06b7-54b0-b41a-9f96dbe53d11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2191 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2023-26048", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:cf2de751-4fad-5005-98f3-64898e94f269", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26048 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2023-26049", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:a4fd934f-af06-51af-aa2c-39ccd9ee7e88", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26049 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2023-40167", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:97038abe-037a-5a81-a05e-ebb709e5e9b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40167 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2024-13009", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:de89658a-02af-5ae5-8cdb-6fa11120f9ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-13009 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2024-6763", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:1d45edbd-de53-5fad-ae8f-6b4018b6e51d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6763 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2024-7708", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:1390eb49-6233-506e-94a7-94c56adc525d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-7708 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2024-8184", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:5a2452e4-9483-5683-b8e9-582415ee2df1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-8184 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2025-11143", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:0b5b4b01-b701-50bf-af75-a7e6c999362b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-11143 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2026-10050", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:b9ec300f-6268-5c9e-9ab9-f243de1aec59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-10050 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2026-10051", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:f47d50ac-6119-5e4e-a116-c781d9a69c0d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10051 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2026-1605", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ec5efd3a-ca79-5064-aece-c03e60c7f537", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1605 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2026-18659", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:332ee436-ce59-55cf-9940-d262d4306734", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18659 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2026-18660", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:8f4996f0-6abf-596d-8533-4111600bf3b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18660 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2026-18662", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:b2a96b42-880a-5330-8c88-7ab2793fe003", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18662 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2026-19864", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:3aafd49a-8f36-5400-bc02-19fda66ae400", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-19864 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2026-2332", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:e4f94f7f-02d0-5dae-9aea-f690986c2854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-2332 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2026-6790", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:d531f866-f35f-5f2f-8a2c-ec38dc432500", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6790 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } }, { "id": "CVE-2026-8384", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:eaeda704-b658-5647-9eae-5fa9436b8397", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-8384 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet." } } ], "dependencies": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8.websocket/jetty-ee8-websocket-servlet@12.0.22-tuxcare.1" } ] }