{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:fa52751c-e248-5e1a-9543-f0b016ce6680", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "jetty-memcached-sessions", "purl": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1", "type": "library", "group": "org.eclipse.jetty.memcached", "bom-ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1", "version": "12.0.22-tuxcare.1", "pedigree": { "ancestors": [ { "name": "jetty-memcached-sessions", "purl": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22", "type": "library", "group": "org.eclipse.jetty.memcached", "version": "12.0.22" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2006-6969", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:af335137-9cbd-58c6-9bd6-37d812b843a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2006-6969 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2007-1651", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:6c563f3c-c277-5aad-bede-e9bfc14f12ad", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2007-1651 does not affect version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions. Target Jetty 12.0.22 is NOT affected. The CVE concerns a CSRF / session-restoration weakness in Jetty's OpenID Connect support; the two vendor patches (5f2c96dc, 2020 \u2014 move ID-token expiry to initial-auth-only + proper logout/validate delegation; e9f260f4, 2021 \u2014 replace the single anti-forgery CSRF token with a per-session, SecureRandom-keyed csrfMap and mandatory `state` validation) are UPSTREAM Jetty fixes authored by lachlan@webtide.com years before the 12.0.22 release (June 2025). Both fix commits are ancestors of HEAD, and the shipped jetty-core/jetty-openid and jetty-ee9/jetty-ee9-openid modules contain the complete post-fix code. The pre-fix vulnerable pattern (single CSRF_TOKEN setAttribute, isExpired() gating session validity, empty logout()) is absent. Not a TuxCare backport \u2014 the fix is native/upstream, so verdict is not_affected (justification code_not_present), not already_fixed.", "justification": "code_not_present" } }, { "id": "CVE-2007-1652", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:711618a3-4b6e-5b6a-9b1f-688ef4174379", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2007-1652 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2011-4461", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:8943d196-382f-5c78-b89e-4699058baa62", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-4461 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2015-2080", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:e1c37d86-daa1-5796-8def-8810a6d08ae3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-2080 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2016-4800", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c101a213-eafd-58b2-a0b3-b98891d7fa4e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-4800 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2017-7656", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:694ce709-6360-529a-b15d-c0086ea430c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7656 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2017-7657", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ba383206-e892-5cfe-8138-cf97424bef4c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7657 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2017-7658", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:8299fbd7-306e-5907-ac48-29dd36a87807", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7658 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2017-9735", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:eebbc03d-751d-51e9-8c60-1028711f017b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-9735 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2018-12536", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:f9cb4136-22b1-51c9-8eaa-1de22bca7e35", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12536 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2018-12538", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:21d175a3-dba8-516f-bae0-3fc902e6b9eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12538 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2018-12545", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:7a981fdc-b168-51e9-a5b7-f1af150d89f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-12545 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2019-10241", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:8ca98d9e-4418-5af6-b684-da2aa3d46cbb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10241 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2019-10246", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:4ef6a2ab-edcb-518d-b790-c3f2579cd670", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10246 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2019-10247", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:3db7dfdc-6fd5-5a0c-b9d9-a911a21c1e15", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-10247 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2019-17632", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:f96fc736-3223-5205-9310-a78ba3713e92", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17632 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2019-17638", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c429684f-655f-5c58-ba7e-1e40e4969dca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17638 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2020-27218", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:d63e329c-9c6a-54d0-bfa4-41853503bcc1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27218 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2020-27223", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:8ee87084-a90d-562d-b032-6904d3c82347", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-27223 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2021-28163", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:65934d27-adec-561b-8002-a6196a24bb74", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28163 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2021-28165", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:8c8911a4-b88b-5223-9522-4a80803b6463", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-28165 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2021-34428", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:20149b74-1600-5b39-be9e-9c828793c8bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-34428 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2022-2047", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:15315706-033d-58bf-96da-fd45f3e844ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2047 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2022-2191", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:5b15c40d-7eb0-5a71-a459-3bdee1961fb7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-2191 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2023-26048", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:2ed7cda5-f4a3-5e7f-8b4c-a65813450416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26048 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2023-26049", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:4a7f6a3b-cfc4-501e-a24c-ff74376536bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-26049 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2023-36479", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:14094219-596a-5f59-85c2-f98f5f03be19", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-36479 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2023-40167", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:f11240e9-41ad-5fc4-8c75-36d87e2153b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-40167 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2023-41900", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:a4d247fa-fbab-5766-ab60-0c040b1e0ce2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-41900 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2023-44487", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:0ce5f137-b578-508e-9d0b-f507b491bbeb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-44487 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2024-13009", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:10dea235-540b-5421-91d1-9b2d93997e84", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-13009 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2024-22201", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ce6a8a02-838f-54c0-85dd-98ee8badb989", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22201 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2024-6763", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:df591f3a-bd78-54e7-b33b-e8b9c2237ad1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-6763 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2024-7708", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:cca74226-e629-5a9c-8b81-f374ae85b1f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-7708 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2024-8184", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:c6f69b04-e620-5736-9cca-e88730361ace", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-8184 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2024-9823", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:9835208c-e536-5cb8-a471-14238f64ab79", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-9823 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2025-11143", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:bd8decd5-b3d5-5aca-95a1-0a03a5f27335", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-11143 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2025-1948", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:f63ad2a4-2d0e-5ec1-9fd1-230fb0ef950e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-1948 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2025-5115", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:8021ded9-3870-5f55-b3e5-0c834a01d4db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-5115 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2026-10050", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:4c987f93-d70d-53d0-998c-058fc3fb9395", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-10050 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2026-10051", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:6ffc505d-8f6c-50db-8936-c8477e2dae72", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-10051 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2026-1605", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:522b0a22-39d4-54fc-b183-54cb75b4a4c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-1605 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2026-18659", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:fbcbfa5c-ef5c-590e-95bd-2ce71e53c2b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18659 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2026-18660", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:69680e4e-f835-5edb-9578-119ee8097d15", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18660 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2026-18661", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:46d494d6-f74b-5401-8dd9-bc4e74aa06f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18661 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2026-18662", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:6109af79-7cad-5542-a453-f77d562fa6ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-18662 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2026-19864", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:7e81fb34-4138-567a-955a-dd4cf4d0cbdb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-19864 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2026-2332", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:57444d13-e590-5cc6-941c-d3869c47d5dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-2332 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2026-5795", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:a32a8e37-ccbe-5fda-8ea5-498370217b35", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-5795 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2026-6790", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:41e32555-4f11-5dbc-a088-53a82eaa7c0c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-6790 is fixed in version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "CVE-2026-8384", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:0b6eaf39-1f29-56c7-8d27-42ea4ded1671", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-8384 affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "GHSA-58qw-p7qm-5rvh", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:4e98570c-71dd-5dfd-a517-c4b74eab6435", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 12.0.22-tuxcare.1 of org.eclipse.jetty.memcached:jetty-memcached-sessions." } }, { "id": "GHSA-gc59-r5jq-98qw", "affects": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ], "bom-ref": "urn:uuid:ea8104d5-11aa-5d32-ab37-87c19bb02c64", "analysis": { "state": "false_positive", "detail": "Vulnerability GHSA-gc59-r5jq-98qw is a false positive for org.eclipse.jetty.memcached:jetty-memcached-sessions 12.0.22-tuxcare.1." } } ], "dependencies": [ { "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@12.0.22-tuxcare.1" } ] }