{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:fa1e706c-8dbb-5105-b696-1982c4c41d2f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "jetty-ee8-bom", "purl": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1", "type": "library", "group": "org.eclipse.jetty.ee8", "bom-ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1", "version": "12.0.22-tuxcare.1", "pedigree": { "ancestors": [ { "name": "jetty-ee8-bom", "purl": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22", "type": "library", "group": "org.eclipse.jetty.ee8", "version": "12.0.22" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2006-6969", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:fd673097-ea7a-563b-878f-05284e0bc815", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2006-6969 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2007-1651", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:7a1e1996-dad4-5461-a42c-13799f7cfa7f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2007-1651 does not affect version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom. Target Jetty 12.0.22 is NOT affected. The CVE concerns a CSRF / session-restoration weakness in Jetty's OpenID Connect support; the two vendor patches (5f2c96dc, 2020 \u2014 move ID-token expiry to initial-auth-only + proper logout/validate delegation; e9f260f4, 2021 \u2014 replace the single anti-forgery CSRF token with a per-session, SecureRandom-keyed csrfMap and mandatory `state` validation) are UPSTREAM Jetty fixes authored by lachlan@webtide.com years before the 12.0.22 release (June 2025). Both fix commits are ancestors of HEAD, and the shipped jetty-core/jetty-openid and jetty-ee9/jetty-ee9-openid modules contain the complete post-fix code. The pre-fix vulnerable pattern (single CSRF_TOKEN setAttribute, isExpired() gating session validity, empty logout()) is absent. Not a TuxCare backport \u2014 the fix is native/upstream, so verdict is not_affected (justification code_not_present), not already_fixed.", "justification": "code_not_present" } }, { "id": "CVE-2007-1652", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:b6ccffb3-2e44-54d7-a45e-12e9e63272e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-1652 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2011-4461", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:9131332b-7f55-5f62-85eb-07bf403e895d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4461 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2015-2080", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:5b4649cf-3603-520e-9575-ea8ee900ded4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2080 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2016-4800", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:693f2fac-06d1-576c-b543-7d6495ec9394", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-4800 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2017-7656", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:29599f98-f6dd-583e-be0b-e4007c7ed0a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7656 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2017-7657", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:5a111c2e-d4aa-5f8e-8414-80db4fa39d69", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7657 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2017-7658", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:349d3f43-33d3-525e-b85a-32b8acd8f7f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7658 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2017-9735", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:1c0c8bc1-d368-5107-b18f-54b7eb8b2629", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-9735 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2018-12536", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:6009a085-a1d2-5f93-850f-97c53848e7e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12536 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2018-12538", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:8391102d-43ee-54b2-9493-2fae3edebfdb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12538 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2018-12545", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:09463508-4d8a-5661-ad24-fbf92f1cfd24", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12545 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2019-10241", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:8f70c208-4bf6-571f-b3bf-6f6f94bbb1e0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10241 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2019-10246", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:b3bbbe24-6872-5f56-a1b7-37869c3b3afa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10246 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2019-10247", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:f14f50de-52e9-5656-95fc-5f2bd322f69f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10247 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2019-17632", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ab5d7917-c6df-5a7e-9ce8-4a2755c767c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17632 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2019-17638", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:1cb92636-bc6a-5639-b995-8ea20933d5e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17638 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2020-27218", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:6991019a-4ebe-53e4-8abb-d7a1e89dddc8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27218 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2020-27223", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c6159c0e-db45-577e-93ca-3dae0c262157", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27223 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2021-28163", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c9ba0824-9665-5bf7-953d-2a28342579ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28163 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2021-28165", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:9f69d0a0-d572-5d33-ba0f-b921e4e2b518", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28165 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2021-34428", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:4026ed79-7759-5f4c-924e-3aaa24da2f25", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-34428 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2022-2047", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:65537a02-4aab-5ceb-a000-9da7b62e9d49", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2047 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2022-2191", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:48851ca0-27eb-5d9d-8d27-51dee4686d46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2191 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2023-26048", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:bc115517-dadf-58df-b844-9cbc8197f403", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26048 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2023-26049", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ace0e80d-7a8c-5fa1-8954-6c698edca789", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26049 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2023-36479", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:1306361e-ebcd-5a87-b672-7e48d1a27572", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36479 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2023-40167", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:3ba21096-ec85-57e2-a367-92af74f62eee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40167 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2023-41900", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:1f4360ba-2a13-5953-afe9-31dd8ec50e9a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41900 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2023-44487", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:390c88fb-f8ed-5432-ac00-d818e85f0b6c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-44487 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2024-13009", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:aa07b6a5-b67d-5f65-82e9-44cc4ea55833", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-13009 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2024-22201", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c8720b44-9098-5e1d-9c78-a03a19aea924", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22201 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2024-6763", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:5715e60a-743b-5b03-a7cb-d229713c389f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6763 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2024-7708", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:a8002b24-0376-544d-ad7f-1dae86cbc6de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-7708 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2024-8184", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:b4ee0170-b406-5bdb-a0d7-a103d4fbf869", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-8184 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2024-9823", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:8259301a-656b-51f4-8859-e496b745edc1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9823 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2025-11143", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:e4fcaf1b-32be-5c19-8405-b96ef7fe3fc9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-11143 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2025-1948", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:36719b8f-47b9-50de-82e9-cba4191d2a58", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-1948 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2025-5115", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:9fc1e230-1298-593a-9c26-af2966dd8434", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-5115 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2026-10050", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:f4600dcd-ff41-545a-9f19-34739e70095d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-10050 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2026-10051", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:e85dac88-d76d-5b52-b152-1c981832b8d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10051 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2026-1605", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:50539dcd-4544-5cf4-b2e6-ff3391d17970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1605 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2026-18659", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:d0972981-5c2b-5ce5-982d-10ffc6a5b415", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18659 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2026-18660", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:66b33600-f0b4-5fbf-abf8-8bffebacd954", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18660 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2026-18661", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:d09bbf63-f968-53f0-9f59-67c95c3e4f89", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18661 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2026-18662", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:21a33108-dd85-5b34-b2e6-eef472d1bb50", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18662 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2026-19864", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:57e2c1e7-1c96-5cc7-94ce-0d713d655402", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-19864 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2026-2332", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:2d9b50f0-f658-525d-8280-b1f0db7832d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-2332 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2026-5795", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:3781d109-1135-5664-a080-c5407e06c97c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-5795 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2026-6790", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:4c69328b-375f-52f3-bc08-176f7dfd29b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6790 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "CVE-2026-8384", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:01834f70-407f-5186-9aaa-0556f3c5c1ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-8384 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "GHSA-58qw-p7qm-5rvh", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:97bc7df9-5a44-54fa-9230-1f6c823c7575", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-bom." } }, { "id": "GHSA-gc59-r5jq-98qw", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:342a9c11-f559-5941-9acd-39f47825d2b6", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-gc59-r5jq-98qw is a false positive for org.eclipse.jetty.ee8:jetty-ee8-bom 12.0.22-tuxcare.1." } } ], "dependencies": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-bom@12.0.22-tuxcare.1" } ] }