{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:915f6ef9-c6c0-52db-936e-40e59cbb512f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "jetty-ee9-demo-embedded", "purl": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1", "type": "library", "group": "org.eclipse.jetty.ee9.demos", "bom-ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1", "version": "12.0.22-tuxcare.1", "pedigree": { "ancestors": [ { "name": "jetty-ee9-demo-embedded", "purl": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22", "type": "library", "group": "org.eclipse.jetty.ee9.demos", "version": "12.0.22" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2006-6969", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:4d04d01d-bcc8-5509-9cdd-72898618a9c2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2006-6969 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2007-1651", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:a4a86823-8c1f-5a63-a9e5-ff210a95e193", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2007-1651 does not affect version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded. Target Jetty 12.0.22 is NOT affected. The CVE concerns a CSRF / session-restoration weakness in Jetty's OpenID Connect support; the two vendor patches (5f2c96dc, 2020 \u2014 move ID-token expiry to initial-auth-only + proper logout/validate delegation; e9f260f4, 2021 \u2014 replace the single anti-forgery CSRF token with a per-session, SecureRandom-keyed csrfMap and mandatory `state` validation) are UPSTREAM Jetty fixes authored by lachlan@webtide.com years before the 12.0.22 release (June 2025). Both fix commits are ancestors of HEAD, and the shipped jetty-core/jetty-openid and jetty-ee9/jetty-ee9-openid modules contain the complete post-fix code. The pre-fix vulnerable pattern (single CSRF_TOKEN setAttribute, isExpired() gating session validity, empty logout()) is absent. Not a TuxCare backport \u2014 the fix is native/upstream, so verdict is not_affected (justification code_not_present), not already_fixed.", "justification": "code_not_present" } }, { "id": "CVE-2007-1652", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:a48ac78b-6441-51b2-8c83-8152a1cbb921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-1652 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2011-4461", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:a3b1d4ad-7910-5694-956b-5f68b7a5a653", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4461 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2015-2080", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:36510e8d-30ff-5a62-8978-f3940c899643", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2080 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2016-4800", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:2dde812f-4cdf-5e28-b2e0-a6b6227e99f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-4800 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2017-7656", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:60af7dfa-e6e4-545b-b4cf-48ac9e0c9e72", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7656 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2017-7657", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:a9bf38f5-5819-54a7-971f-9d3eb65cb69a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7657 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2017-7658", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:aecd4fa2-c582-5b04-9e6a-458f74756c23", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7658 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2017-9735", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:b830a20f-3770-5e8a-acf3-252abeb8b991", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-9735 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2018-12536", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:4dd681d2-d64c-500c-b4e7-9342718598a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12536 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2018-12538", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:b9e50eec-76ca-5627-a945-56477c22e8d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12538 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2018-12545", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:02bd58ab-8ffd-5fcf-8ad1-fea222afa900", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12545 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2019-10241", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:92c67b1d-2352-5375-b48e-7627661254d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10241 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2019-10246", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:27116141-8cee-5948-a821-7af8d10fc41c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10246 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2019-10247", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:77030671-57fc-5399-add4-de69c30c8602", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10247 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2019-17632", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:692cc317-4575-5317-9f8f-880806b7bfa8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17632 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2019-17638", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:bdc8845e-41d9-5ea2-9d8a-bb01b413fbd0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17638 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2020-27218", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ac78e841-18fd-511b-830c-475938865a35", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27218 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2020-27223", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:77ae635c-0fa2-5868-bdaf-4f028a24a514", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27223 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2021-28163", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:55f92a96-b474-5fe4-99d7-30a7859f56db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28163 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2021-28165", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:336f1872-a3d4-5df5-bea5-6e37e8980f2d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28165 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2021-34428", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c4fd9f46-484f-5330-b202-6fbadaa22f5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-34428 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2022-2047", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:0eaa45ef-4c72-5cfe-b49a-801d88325c89", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2047 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2022-2191", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:583f6552-ec09-56cb-88c7-d9cb4f2114d5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2191 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2023-26048", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:a707e695-bb93-5b93-9e70-463b3b5d7bfb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26048 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2023-26049", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:288a6385-21bd-56b5-8852-9ab729b8daa2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26049 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2023-36479", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:015b43c6-855a-53fe-b3c6-6f72ccb19e46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36479 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2023-40167", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:4b165472-d253-5de4-bb59-8a5121863c43", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40167 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2023-44487", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:cd04f804-1282-5beb-9048-143ebc02de27", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-44487 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2024-13009", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:d4a912f2-3ebe-5275-be24-41c9407f7bc7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-13009 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2024-22201", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:3d83360e-9971-5eb3-a97a-c8bb0fa342c2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22201 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2024-6763", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:9a4011f9-38b4-5f66-b7a0-db46e6818fa7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6763 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2024-7708", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:7f0483cb-1832-5ff2-94cb-a52e1651611f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-7708 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2024-8184", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:d9683c69-b628-5d1a-a930-35997208beda", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-8184 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2024-9823", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:af033e85-58fb-5495-b962-5b384b367c41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9823 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2025-11143", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:7b6235b2-7c38-5b4c-9e01-e4dbd14e3140", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-11143 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2025-1948", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:919e1ab9-4d43-574d-881c-d3efc65e7607", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-1948 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2025-5115", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:b15bc02c-86da-5225-bda6-be0c2f4f7959", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-5115 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2026-10050", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:9b064a21-2968-5ff7-bcb9-446cf4de799d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-10050 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2026-10051", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:4c9861a8-5002-58c2-9e13-f10946bfc16c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10051 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2026-1605", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ed82e8fc-9338-57df-9eae-88693411bb75", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1605 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2026-18659", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:0126a7ed-5376-5427-9a69-bfdbf3094005", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18659 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2026-18660", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:bf047698-a9e4-5d41-a210-dabcf19b7d0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18660 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2026-18661", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:fdd75248-87ec-5f37-9d5d-219c09ecefc2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18661 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2026-18662", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:060bc8a9-d6ca-5286-aaf0-b3315468ca18", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18662 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2026-19864", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c36af6a1-1747-5a7b-ae1e-6d4e2aced9b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-19864 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2026-2332", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:2e606d61-d28a-5efc-8837-0e8acda051dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-2332 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2026-6790", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:bf438fa8-4107-5065-87b6-113ba2f70210", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6790 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "CVE-2026-8384", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:9d6493b2-aa1b-5bc4-a94a-4252783e8a3f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-8384 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } }, { "id": "GHSA-58qw-p7qm-5rvh", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:af8b5a57-5e7a-59b5-a466-c52cdefcab6c", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded." } } ], "dependencies": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.demos/jetty-ee9-demo-embedded@12.0.22-tuxcare.1" } ] }