{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:90ded7dc-7086-5fe3-9ac0-3f3dbe5a6df9", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "jetty-ee8-proxy", "purl": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1", "type": "library", "group": "org.eclipse.jetty.ee8", "bom-ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1", "version": "12.0.22-tuxcare.1", "pedigree": { "ancestors": [ { "name": "jetty-ee8-proxy", "purl": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22", "type": "library", "group": "org.eclipse.jetty.ee8", "version": "12.0.22" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2006-6969", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:aa537989-bc22-55ad-bae2-a1ef08c5447b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2006-6969 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2007-1651", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:3025ed6b-c19b-5cfd-95ed-5211eed4595a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2007-1651 does not affect version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy. Target Jetty 12.0.22 is NOT affected. The CVE concerns a CSRF / session-restoration weakness in Jetty's OpenID Connect support; the two vendor patches (5f2c96dc, 2020 \u2014 move ID-token expiry to initial-auth-only + proper logout/validate delegation; e9f260f4, 2021 \u2014 replace the single anti-forgery CSRF token with a per-session, SecureRandom-keyed csrfMap and mandatory `state` validation) are UPSTREAM Jetty fixes authored by lachlan@webtide.com years before the 12.0.22 release (June 2025). Both fix commits are ancestors of HEAD, and the shipped jetty-core/jetty-openid and jetty-ee9/jetty-ee9-openid modules contain the complete post-fix code. The pre-fix vulnerable pattern (single CSRF_TOKEN setAttribute, isExpired() gating session validity, empty logout()) is absent. Not a TuxCare backport \u2014 the fix is native/upstream, so verdict is not_affected (justification code_not_present), not already_fixed.", "justification": "code_not_present" } }, { "id": "CVE-2007-1652", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:a6d10c0e-ab35-5fba-b72c-8cf635130b39", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-1652 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2011-4461", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:05250d44-31ed-5ed5-8644-53b3128e28e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4461 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2015-2080", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:72cb957f-fd71-5ffd-a3d2-7100623b5a6a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2080 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2016-4800", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:8e79f706-b2c9-5462-80b9-53d572089639", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-4800 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2017-7656", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:42027e0d-b0df-54af-8875-62a818f2c39d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7656 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2017-7657", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:56db5d86-f953-596e-baac-85082aca8aae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7657 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2017-7658", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:4a461d2b-783b-5835-a6c3-ec345716c120", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7658 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2017-9735", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:1c76d01a-fd6d-523b-a7f6-f948c086247b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-9735 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2018-12536", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:376363b1-008a-59ef-88b8-214818cfd7ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12536 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2018-12538", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:19ce9193-c3f7-5f0b-a3c4-ee15b23fb7ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12538 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2018-12545", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:00a3f330-4301-5e62-8d02-8eebb2c2d33d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12545 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2019-10241", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:e5f5509b-b261-51bb-b629-4311615eb863", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10241 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2019-10246", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:094db9c2-7ad5-5b2b-ab58-e6bde1d2abb6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10246 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2019-10247", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:9d41e608-07b0-54ce-acd7-1b01dc3be4be", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10247 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2019-17632", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c3d5b8d7-c3a4-587a-851b-887cbd7fea73", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17632 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2019-17638", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:70be7a5c-3fba-5fc6-a008-dce716c304ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17638 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2020-27218", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:522540e5-e036-5fd9-bd8d-431c9679ea92", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27218 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2020-27223", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:38ab2627-2f03-5376-bafb-e9cdc981c9bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27223 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2021-28163", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c8cadb28-167b-5e39-819a-666be82f010c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28163 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2021-28165", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:62a91394-e407-5b77-838f-87871bb30443", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28165 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2021-34428", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:7d6e2284-7555-5c23-b607-779e0b9f88a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-34428 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2022-2047", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:e95ad133-26e4-5bde-823e-96ffe3af4e17", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2047 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2022-2191", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:bff806bd-b9d4-5a1d-926a-9dd555ef904c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2191 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2023-26048", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:3853af54-9898-52c5-919e-c0d854a18062", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26048 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2023-26049", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:dc1503fb-a9e2-504a-ba50-2ed59b2db4f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26049 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2023-36479", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:31126e6b-3c5b-5848-a202-56ab328be176", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36479 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2023-40167", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:f750b26d-4896-5eca-b318-397a0ee19d12", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40167 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2023-41900", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:fa72a562-69ae-579a-a57f-af3672fc7c69", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41900 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2023-44487", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:37cb6d5b-3897-5441-bacf-5fdcba131f26", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-44487 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2024-13009", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:66646a7d-a221-59e4-9d17-7bc22e95202d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-13009 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2024-22201", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:83519789-c739-5155-bf83-08a681d1b632", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22201 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2024-6763", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:5fbea8e8-63d0-54a4-905e-9bdf13d757dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6763 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2024-7708", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:5e0a0bd7-ce7a-51e3-9612-67121cbe322e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-7708 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2024-8184", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:11e094cb-8c2b-5df6-a6b3-bd73ced798f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-8184 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2024-9823", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:1ad74d3e-497e-5cc7-9c8a-acef30c1e9f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9823 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2025-11143", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:95b1fb5d-4c79-5ec8-82f1-4293b1152936", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-11143 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2025-1948", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:766bf2ab-a59d-5dc6-8399-5a7416b25eba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-1948 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2025-5115", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:1cd9acf0-019a-579b-b5ff-e7599b6a5c99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-5115 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2026-10050", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:7f0648c9-e5ec-5f00-ab81-e3fcc5a5ce5c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-10050 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2026-10051", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:6062d5da-c274-5210-9694-9e9abe376baa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10051 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2026-1605", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:79eb2c2a-311e-5758-869d-ac1c1304706d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1605 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2026-18659", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:077a5c02-6245-553d-bb6d-7612621060d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18659 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2026-18660", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c4fd0f3c-5d21-51c3-be3e-b5c75010c637", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18660 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2026-18661", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ca24f75c-efc2-52d2-ba39-67460544f5b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18661 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2026-18662", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:73fa4bfa-f73f-5ca3-b9f3-9393c76f96fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18662 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2026-19864", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:5fdc55f6-574e-5446-bba3-085f522da610", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-19864 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2026-2332", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:52edc9ab-6c94-555b-8bd8-3b5dfc72f590", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-2332 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2026-5795", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:063f5bc8-8cf9-58db-9023-b3f4768711b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-5795 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2026-6790", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:cfaa5703-21e6-55b7-8e02-5f03c3096793", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6790 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "CVE-2026-8384", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:d2758bde-7aab-5697-9679-bc9f35a9798d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-8384 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "GHSA-58qw-p7qm-5rvh", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:644e470f-148e-5068-8fb7-ac1c7c311960", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee8:jetty-ee8-proxy." } }, { "id": "GHSA-gc59-r5jq-98qw", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:26f5b258-769e-5bb2-915e-63311d16801a", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-gc59-r5jq-98qw is a false positive for org.eclipse.jetty.ee8:jetty-ee8-proxy 12.0.22-tuxcare.1." } } ], "dependencies": [ { "ref": "pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-proxy@12.0.22-tuxcare.1" } ] }