{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:477d5732-4a78-5df4-ac07-497cd57656ad",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "jetty-memcached-sessions",
      "purl": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005",
      "type": "library",
      "group": "org.eclipse.jetty.memcached",
      "bom-ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005",
      "version": "11.0.28.tuxcare0005",
      "pedigree": {
        "ancestors": [
          {
            "name": "jetty-memcached-sessions",
            "purl": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28",
            "type": "library",
            "group": "org.eclipse.jetty.memcached",
            "version": "11.0.28"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2006-6969",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:5cd2b9f4-2513-5226-bb7c-5f95d77e9b17",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2006-6969 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2011-4461",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:fd2823d2-58dc-53b5-9b08-e1b52c691f49",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-4461 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2015-2080",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:633ed50a-e943-5aac-9e49-b76e3c669ded",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-2080 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2016-4800",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:1830a363-ca44-5ab1-afc6-d921f331f757",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-4800 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2017-7656",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:21f72cf2-1202-5777-b72c-fafdd709c8e2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7656 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2017-7657",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:88059250-e7b3-55ea-abfa-5c3a8cac0aa8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7657 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2017-7658",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:fd0dcead-cd6b-59cc-8b42-9f5b9437844a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7658 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2017-9735",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:69523649-2b17-5914-a8ef-bd5b3734223e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-9735 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2018-12536",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:624ec74a-ee7f-5830-99d4-ec6eb7c6a988",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-12536 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2018-12538",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:7744c24c-06ca-5f8b-96e8-f066c272b4a8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-12538 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2018-12545",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:82af2cf2-a837-5641-bebf-ed9960563794",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-12545 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2019-10241",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:a39d0f05-87af-5c66-89c5-f66f382e3b4a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10241 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2019-10246",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:f55a55df-f19c-50ba-b6cc-fdc463baeb3f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10246 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2019-10247",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:4b545dab-b231-5471-bc62-23b891b49f2e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10247 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2019-17632",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:0a9d2382-c5c1-5e86-803e-8478b0fa30ec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-17632 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2019-17638",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:423032ef-5978-53d4-aea4-865e07e0d0b9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-17638 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2020-27216",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:6c618aec-1bf9-5d9e-a26d-4f85ff33ffee",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27216 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2020-27218",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:77992cdd-5ea2-530d-bb0d-21a07245cec0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27218 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2020-27223",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:f528271a-9be5-5efa-bb44-e7ad7c0f975b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27223 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2021-28163",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:ebf4050b-3a9c-5b23-8472-67b83a8e1eb9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28163 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2021-28164",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:35c6ab83-799f-54c5-bea5-e0eeadaf725f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28164 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2021-28165",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:0a06260d-ca6a-57cb-b311-e339d9668829",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28165 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2021-28169",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:bd6e42ad-705a-59d7-98f9-4c5b77540d1f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28169 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2021-34428",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:7c3a1aaa-c717-5f0b-922b-98ab0eb0e437",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-34428 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2021-34429",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:0acd10e4-cb62-52c7-9387-c2664f70de97",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-34429 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2022-2047",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:f5c1173e-d0e0-5dff-82c4-7e51655760c6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-2047 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2022-2048",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:b6c36d9a-bceb-5487-b2e2-998853db3fd7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-2048 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2022-2191",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:03127022-ed29-560f-b07f-9522524ec4f5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-2191 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2023-26048",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:8fcd132a-780b-5048-af5d-9e3b8cb3c13e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-26048 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2023-26049",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:07d7172e-4913-5543-8ef1-97874e4cd64a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-26049 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2023-36478",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:0ba47d1f-1df7-5576-9288-1795cc44d919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36478 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2023-36479",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:53414477-d2fb-588c-9f75-eaa36b08b432",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2023-36479 does not affect version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions. Version 11.0.28 is not affected by CVE-2023-36479: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed."
      }
    },
    {
      "id": "CVE-2023-40167",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:ce1d7b2e-cc71-58a6-a708-cac2adc7a120",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40167 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2023-41900",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:f4fb2447-c22d-5011-acff-d17ce01b90fe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-41900 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2023-44487",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:d46fa10b-14f0-5c0e-a08a-3fee24af37dd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2024-13009",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:b06177b8-d392-5523-a2af-f7e5002a8985",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-13009 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2024-22201",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:c93dfa75-3c0b-5e14-a2eb-32f23c2fdb91",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22201 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2024-6762",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:011baf93-39c4-537f-94f0-439631cad312",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6762 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2024-6763",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:0f41ba84-5d2a-5960-9814-28e5db5904d9",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2024-6763 does not affect version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions. fix for CVE for this version has been already backported by the original developers, so this brunch is not vulnerable",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2024-7708",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:f5e1dd3b-5cd5-556d-a4d2-bca055a9b1cd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-7708 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2024-8184",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:519855ca-323a-5a48-a5ae-c733230b2230",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2024-8184 does not affect version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions. Version 11.0.28 is not vulnerable. Summary: The target repository already has the security fix for CVE-2024-8184 applied. The code uses atomic compute() operations with reference counting and proper cleanup mechanisms to prevent memory exhaustion. [terminalized not_affected from patch_application_manual/not_vulnerable]",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2024-9823",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:6677837c-d25a-54d4-973d-3ce6dd63c610",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-9823 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2025-11143",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:4760bc71-922b-52fc-ad8f-22a13436b226",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-11143 is fixed in version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2025-5115",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:ea979e2f-41e5-5385-bafb-1a1b8ad9b955",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-5115 does not affect version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions. fix for CVE for this version has been already backported by the original developers, so this brunch is not vulnerable",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-10050",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:13f51594-ab8a-5c1c-ba2f-bf33a8d06831",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-10050 is fixed in version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2026-10051",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:f429e116-249f-55de-9d3d-6f1693e0ec4c",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-10051 does not affect version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions. not_affected \u2014 Jetty 11.0.28 is not affected by CVE-2026-10051. The vulnerability describes trailer leakage in Jetty 12.x's redesigned internal.HttpConnection where the _trailers field was never cleared between requests. Jetty 11.0.28 has a fundamentally different architecture where _trailers exists in HttpChannelOverHttp and is properly cleared via the established recycle() mechanism between HTTP/1.1 keep-al...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-1605",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:4a8955d7-cd66-5a9f-ba3e-6495697d804f",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-1605 does not affect version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions. Version 11.0.28 is not vulnerable. Summary: Target repository is NOT vulnerable to CVE-2026-1605. The vulnerability affects Jetty 12.x (versions 12.0.0-12.0.31 and 12.1.0-12.0.5), while the target is running Jetty 11.0.28.tuxcare0001, which uses a different architecture for request decompression that does not exhibit this vulnerability. [terminalized not_affected from patch_application_manual/not_vulnerable]",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-18659",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:7ec19e41-2dd7-5e7e-8971-821463c8e3fb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-18659 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2026-18660",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:b2189aa1-5079-567d-8a34-4a061087a38b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-18660 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2026-18661",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:32f67093-1bbe-551e-989e-802038dfd364",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-18661 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2026-18662",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:569cc627-738b-5494-9875-263c651bece7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-18662 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2026-19864",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:6f55c9f6-ea55-51e4-8436-04e4cb22e3f5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-19864 affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2026-2332",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:3f2510c7-70a5-58a8-b10a-e28df6cb4a93",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-2332 is fixed in version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2026-5795",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:87746cb6-6612-557d-81b8-42dfd498716a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-5795 is fixed in version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2026-6790",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:96af943d-cd17-5461-9cb4-f6a01bff9ea4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-6790 is fixed in version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2026-8384",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:dec44120-11db-5532-a196-5af15ef7f06e",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-8384 does not affect version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions. not_affected \u2014 Jetty 11.0.28 is not affected by CVE-2026-8384. While the target contains similar semicolon-handling code in decodePath() that doesn't update the character tracking variable, the vulnerability does not manifest due to architectural differences. Jetty 11 uses a two-stage normalization process (decodePath then canonicalPath) where the path is always fully normalized before security checks, unlike...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "GHSA-58qw-p7qm-5rvh",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
        }
      ],
      "bom-ref": "urn:uuid:e672979e-cf88-5fdd-9b82-88234178bcb9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 11.0.28.tuxcare0005 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@11.0.28.tuxcare0005"
    }
  ]
}