{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0f973146-6471-586a-8fc5-b6d622ad7720", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "jetty-ee8-jndi", "purl": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1", "type": "library", "group": "org.eclipse.jetty.ee8", "bom-ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1", "version": "12.0.22-tuxcare.1", "pedigree": { "ancestors": [ { "name": "jetty-ee8-jndi", "purl": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22", "type": "library", "group": "org.eclipse.jetty.ee8", "version": "12.0.22" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2006-6969", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:b2c6a04e-d9e4-5442-b981-a379f8ff1937", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2006-6969 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2007-1651", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:e60cacf2-9e2e-5331-9d25-a71b1f15c196", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2007-1651 does not affect version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi. Target Jetty 12.0.22 is NOT affected. The CVE concerns a CSRF / session-restoration weakness in Jetty's OpenID Connect support; the two vendor patches (5f2c96dc, 2020 \u2014 move ID-token expiry to initial-auth-only + proper logout/validate delegation; e9f260f4, 2021 \u2014 replace the single anti-forgery CSRF token with a per-session, SecureRandom-keyed csrfMap and mandatory `state` validation) are UPSTREAM Jetty fixes authored by lachlan@webtide.com years before the 12.0.22 release (June 2025). Both fix commits are ancestors of HEAD, and the shipped jetty-core/jetty-openid and jetty-ee9/jetty-ee9-openid modules contain the complete post-fix code. The pre-fix vulnerable pattern (single CSRF_TOKEN setAttribute, isExpired() gating session validity, empty logout()) is absent. Not a TuxCare backport \u2014 the fix is native/upstream, so verdict is not_affected (justification code_not_present), not already_fixed.", "justification": "code_not_present" } }, { "id": "CVE-2007-1652", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:aa5fa0e4-0fa6-524c-8e1b-c441e60c886d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-1652 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2011-4461", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:25795981-6860-5504-b0ee-7a4a2b05695c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4461 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2015-2080", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c38796fc-ee8b-52a0-a25f-402a37a1495e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2080 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2016-4800", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:2f36a5b3-5517-5e30-a139-bce72f4f1712", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-4800 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2017-7656", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:916e0ea6-d82c-50c6-95a6-4a6c5aec42af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7656 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2017-7657", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:5b65b7ff-58f6-55f3-ba67-202847fbd9ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7657 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2017-7658", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:1271cc55-8395-534f-8064-eea31d97ec35", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7658 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2017-9735", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:633a64bb-4239-52d7-a0cd-a3f00faa2058", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-9735 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2018-12536", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:00a61143-baa8-526a-9b93-ed48fcee6689", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12536 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2018-12538", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:a60ec738-05f3-5ec6-8838-7c15814f5cf0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12538 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2018-12545", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:cc449c65-10b5-5b14-836a-0411fb104dc0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12545 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2019-10241", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:e7f7deec-fd3b-526b-9fde-21c918883586", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10241 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2019-10246", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:a7fd439b-d3d9-5e93-88bb-676c7be39337", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10246 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2019-10247", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:77585851-7c3f-56f2-ab8b-c6aaba47ebca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10247 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2019-17632", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:91dfd570-eff6-59f8-8507-69c38772bd34", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17632 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2019-17638", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:3ed9b18d-258f-59b1-bb0c-3d7fb625fc4a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17638 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2020-27218", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:eb4fbcb8-244b-5c0c-8934-0c2be65e861b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27218 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2020-27223", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c8482489-be21-506a-be3e-9f823ad5abb0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27223 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2021-28163", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:502ff703-6283-53ac-bff1-e2334e7c993e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28163 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2021-28165", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:e4bbf336-7e0e-5692-bd2e-4cdd10c6f05b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28165 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2021-34428", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:7399e7ae-6d5d-5519-82de-8986dffab092", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-34428 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2022-2047", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:15288efe-8115-5c81-b3c1-5999637d5419", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2047 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2022-2191", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:5384260a-04cf-572f-8ad1-ccc156dba743", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2191 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2023-26048", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:aeab8494-6453-5259-b56a-b7c536285e33", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26048 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2023-26049", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:50ab3a75-9c9e-5e01-b85a-488d4a9b98c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26049 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2023-36479", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:7b520e92-182f-5dc0-b65b-cfa19d86b0bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36479 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2023-40167", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:123e67cf-1195-5071-b6a3-c808918ed4a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40167 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2023-41900", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:7f490383-bbf4-5ea9-b4c2-af88cd0a8a22", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41900 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2023-44487", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:55b83d12-3e75-5a00-ba0a-5aaa082423de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-44487 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2024-13009", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:87c9a8f4-6c32-54d0-8e68-a392b1c37383", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-13009 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2024-22201", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ed647996-c475-50e3-a73a-d229e95f5795", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22201 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2024-6763", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:7b6f7317-72e5-5ac1-9fe4-6e29de5b774a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6763 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2024-7708", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:bc8d2ded-1f10-5e73-8a9c-00343745a551", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-7708 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2024-8184", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:f7a0e1df-b30e-5c66-a6b6-e3423bad8344", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-8184 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2024-9823", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:5bcac0c7-a64c-55b9-9f97-28c8ff36d5aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9823 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2025-11143", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:8ad0dfee-68b7-54c6-88cb-5c4cf1781ca6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-11143 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2025-1948", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:0ff7ab94-47e0-5ba8-a66a-07a55d10dc4d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-1948 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2025-5115", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:43c3f8fb-2263-5fe3-9feb-85af4b8e51c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-5115 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2026-10050", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ae0d9550-785d-5d81-9ceb-265d8e661d31", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-10050 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2026-10051", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:7025f2a8-d33f-5063-9000-e179cf4385bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10051 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2026-1605", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c7683665-9e07-5e76-ba28-cff8a8783a23", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1605 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2026-18659", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:5b2ab925-8d6d-565f-80c7-8e448a21267a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18659 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2026-18660", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:791ddfbb-b12f-52c9-9e22-8d045b6b4928", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18660 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2026-18661", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c5dfe539-b52c-562f-a118-d4d320bf7b14", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18661 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2026-18662", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:879e6a9f-b9bf-5d50-87e6-7e94d7268999", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18662 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2026-19864", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ae728004-6c5c-5633-8d73-446044bd628a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-19864 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2026-2332", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:734a5fd4-1556-5b12-850e-e24f4503dde0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-2332 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2026-5795", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ec8b4e9a-757e-552a-b98d-bd39946337ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-5795 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2026-6790", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:4a15b71f-4a88-5861-a6df-83d677c8f4c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6790 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "CVE-2026-8384", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:7ec594a4-b703-519b-bbfb-1dfcc527a1cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-8384 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "GHSA-58qw-p7qm-5rvh", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:a1a62ecc-9f0d-5f3d-9c85-df51559ea601", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-jndi." } }, { "id": "GHSA-gc59-r5jq-98qw", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:b4941cfd-e4f2-5b20-afde-0b41b9b22a3d", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-gc59-r5jq-98qw is a false positive for org.eclipse.jetty.ee8:jetty-ee8-jndi 12.0.22-tuxcare.1." } } ], "dependencies": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-jndi@12.0.22-tuxcare.1" } ] }