{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6f66aec1-158b-59d6-860e-ae78bc7e554b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "jetty-ee9-websocket-servlet", "purl": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1", "type": "library", "group": "org.eclipse.jetty.ee9.websocket", "bom-ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1", "version": "12.0.22-tuxcare.1", "pedigree": { "ancestors": [ { "name": "jetty-ee9-websocket-servlet", "purl": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22", "type": "library", "group": "org.eclipse.jetty.ee9.websocket", "version": "12.0.22" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2006-6969", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:e1448169-30c9-5052-a0c1-45736944820a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2006-6969 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2007-1651", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:b63c4cfe-d003-52ea-89c8-d1262a42b060", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2007-1651 does not affect version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet. Target Jetty 12.0.22 is NOT affected. The CVE concerns a CSRF / session-restoration weakness in Jetty's OpenID Connect support; the two vendor patches (5f2c96dc, 2020 \u2014 move ID-token expiry to initial-auth-only + proper logout/validate delegation; e9f260f4, 2021 \u2014 replace the single anti-forgery CSRF token with a per-session, SecureRandom-keyed csrfMap and mandatory `state` validation) are UPSTREAM Jetty fixes authored by lachlan@webtide.com years before the 12.0.22 release (June 2025). Both fix commits are ancestors of HEAD, and the shipped jetty-core/jetty-openid and jetty-ee9/jetty-ee9-openid modules contain the complete post-fix code. The pre-fix vulnerable pattern (single CSRF_TOKEN setAttribute, isExpired() gating session validity, empty logout()) is absent. Not a TuxCare backport \u2014 the fix is native/upstream, so verdict is not_affected (justification code_not_present), not already_fixed.", "justification": "code_not_present" } }, { "id": "CVE-2007-1652", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:e2dcfbbe-70be-58fc-91ba-bb3569fb5922", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-1652 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2011-4461", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:27f54c29-1fa7-57f8-9d1d-b76e7f8e58f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4461 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2015-2080", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ee8f6841-3924-577d-86c8-ecccce76cd68", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2080 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2016-4800", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:df3156e2-f8d3-56e5-b987-fb8a4561c61b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-4800 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2017-7656", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:37adaec5-08ac-5c49-8625-c51e3d8d241a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7656 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2017-7657", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:cfc8dee4-b4a7-5219-bf78-767f0686eda0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7657 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2017-7658", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:5cca2b78-9065-5909-9269-9db3dae1d41e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7658 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2017-9735", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:a6dc4a63-0cc4-5ed2-a013-a14f0c913bfb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-9735 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2018-12536", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:523a986e-2ddc-5d6d-b7b9-abdf6372992e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12536 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2018-12538", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:3a41ef5b-c374-56d7-b94f-aa5684b1cbcf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12538 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2018-12545", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:bbdb808d-b8ae-5c4e-97ab-c762a3937609", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12545 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2019-10241", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:6f739c9a-ee09-5c94-9310-915511e4fd38", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10241 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2019-10246", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:2ff34ab7-4b0a-56ac-990a-e450db500c5d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10246 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2019-10247", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:3431fd21-b623-5f14-a503-e709d4867ae7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10247 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2019-17632", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:72ea64d0-98e8-53f4-bc5b-85462b48d0a1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17632 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2019-17638", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c58b6de9-9576-5f3d-8cbd-ec8edab35c0d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17638 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2020-27218", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ec894561-8ba3-5c21-9980-4b8ca5c7bbf6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27218 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2020-27223", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:1efa7e67-9b02-5e2d-b0cf-664a121077b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27223 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2021-28165", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:f4da631d-1090-5181-bda5-7173a79b6bd0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28165 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2021-34428", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:b58c97ec-b578-5534-910b-42ea1ea1b0e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-34428 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2022-2047", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:91b64fed-6846-5bf4-a3b2-7e3ac4e0d6e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2047 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2022-2191", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:0753ed23-9a3a-5fd0-8cd7-4f464cdba34b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2191 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2023-26048", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:8b5bd184-4209-5120-b62e-a22bd944b219", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26048 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2023-26049", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:4c68684d-19e0-5a21-83e1-65f44c4507e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26049 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2023-40167", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c552540a-3a50-5cc9-9fd8-95a081a01990", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40167 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2024-13009", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:e42f0d23-60b6-55f7-b91c-4f09e1a2cc44", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-13009 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2024-6763", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:4bb09057-dd49-54b7-a106-8db8c3f74b75", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6763 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2024-7708", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:14e16eb5-712c-5a3a-8480-51a34af16fbb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-7708 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2024-8184", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:6af7b5dc-f624-5d86-a373-8583f25bf34a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-8184 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2025-11143", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ce2d6ca4-b7ad-5148-99c2-e9c385f6f1e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-11143 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2026-10050", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:84108964-c5b2-55d8-9b73-ee09b38a310d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-10050 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2026-10051", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ee654a75-ac14-5409-afbc-28785e40802e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10051 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2026-1605", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c158bd63-afe8-561e-be3e-e0cdc7af89d5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1605 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2026-18659", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:0d2d22ff-5c64-53db-8449-5cac06ebad58", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18659 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2026-18660", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:3f705c8d-4336-5fc8-863d-2524abff2c98", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18660 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2026-18662", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:67531850-443c-5ebb-bea2-cf7347f30ecb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18662 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2026-19864", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:318c2351-466e-5c69-8921-14e53dbfa446", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-19864 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2026-2332", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:bc40f046-c9be-53cb-9f8b-10cda6ec2db9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-2332 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2026-6790", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:8eb53fd0-6182-5589-8400-8ac29f476d28", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6790 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } }, { "id": "CVE-2026-8384", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:68b9ac02-fca5-5645-b870-1ec4f022b54f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-8384 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.ee9.websocket:jetty-ee9-websocket-servlet." } } ], "dependencies": [ { "ref": "pkg:maven/org.eclipse.jetty.ee9.websocket/jetty-ee9-websocket-servlet@12.0.22-tuxcare.1" } ] }