{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:fbdd3f3e-3830-51ba-82da-25a165c63555",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "jetty-memcached-sessions",
      "purl": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7",
      "type": "library",
      "group": "org.eclipse.jetty.memcached",
      "bom-ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7",
      "version": "9.4.58.v20250814-tuxcare.7",
      "pedigree": {
        "ancestors": [
          {
            "name": "jetty-memcached-sessions",
            "purl": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814",
            "type": "library",
            "group": "org.eclipse.jetty.memcached",
            "version": "9.4.58.v20250814"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2006-6969",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:dab02bbb-6ff4-59c4-83f8-6099b41d645b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2006-6969 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2011-4461",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:d92a8b73-25d9-5f59-b42f-6611cdd67ec7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-4461 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2015-2080",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:d25a5407-3409-5f5d-a2a9-db912633f46d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-2080 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2016-4800",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:f9ffcaf7-0214-5bc1-a51a-daf315de07f8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-4800 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2017-7656",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:9ae98169-3eea-5678-92b3-dad20d904e6c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7656 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2017-7657",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:8669056c-ba2f-51e9-8a8f-7ec83dadb5d7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7657 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2017-7658",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:a5056b3b-19cc-5e9b-958c-4eed1725f9dc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7658 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2017-9735",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:0b94270a-517b-5e88-aa24-52181034e12b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-9735 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2018-12536",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:ae48d0d8-f8d5-5857-abef-2f4aade32d70",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-12536 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2018-12538",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:acd5c491-f1dd-53cc-b7bd-3f51cbc84318",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-12538 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2018-12545",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:a4383f79-db21-5f1d-8290-6f536636cdf8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-12545 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2019-10241",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:e2cd808c-5aee-5aed-ac2b-be6a107790a5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10241 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2019-10246",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:bd6e3506-8244-5d79-8573-ed188263e402",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10246 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2019-10247",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:669d2953-afaa-59df-b7a6-c1f6cbafcd87",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10247 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2019-17632",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:35307dd6-bb12-5fd8-8d1b-94af4a801768",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-17632 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2019-17638",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:f159b343-3e72-55a9-9460-4310b0b2b46f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-17638 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2020-27216",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:6cf08d1d-165f-503e-82af-dbbc77abf674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27216 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2020-27218",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:804eadca-ea31-53c2-8d22-18441fbd982a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27218 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2020-27223",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:46805542-8a30-540e-9545-36fc21af69dc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27223 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2021-28163",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:3be2cec2-162d-5546-95e0-0c93fe6cf732",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28163 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2021-28164",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:d9e46567-6c57-534f-ab06-2563aec82104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28164 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2021-28165",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:5f8b14e9-cead-56a2-95e3-9957bfc7062a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28165 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2021-28169",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:96bbc04e-d63c-5382-9e97-5b58c7cda231",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28169 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2021-34428",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:7100ebb8-5ede-55e2-ba5d-d6bd63248934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-34428 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2021-34429",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:0dd9531d-b845-5a2b-8303-e2a7ad585a99",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-34429 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2022-2047",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:7bc06ddb-3d38-5898-9a57-a0e892dc2303",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-2047 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2022-2048",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:923f3d0b-ce51-5323-bc28-87bcd2a8e439",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-2048 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2022-2191",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:21948db7-1709-5527-ad9c-859487c3da53",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-2191 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2023-26048",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:70a2f035-77f8-5ab6-830b-5f4adf612591",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-26048 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2023-26049",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:f3298270-bee0-534b-a96b-0ff175f254fa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-26049 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2023-36478",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:ea785000-ef1c-56c8-a7df-c37f62001e24",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36478 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2023-36479",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:ae7dbb3d-a25d-5a25-97ab-a2a8778f3224",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36479 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2023-40167",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:6e07c8bc-5aa7-599b-891b-542165df300b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40167 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2023-41900",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:28f5526f-12b7-52a3-a6f7-bd1332b5410a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-41900 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2023-44487",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:e99d8ebb-ab54-5e37-b161-ff5c3ab36d1b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2024-13009",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:64a57beb-be13-587f-bbfb-561f9547c954",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-13009 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2024-22201",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:318535d9-cdff-5382-8856-7572a01bde78",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22201 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2024-6762",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:3de97d0f-baad-5cca-8db9-5a04c2e9cbae",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6762 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2024-6763",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:89ec864b-d3cc-5563-a781-7b0f9809fb3c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6763 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2024-7708",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:3932ad38-9a98-5edc-b6a7-09f21ef1d9a7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-7708 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2024-8184",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:ba26d982-5d72-57df-8d61-22a0ca975dbb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-8184 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2024-9823",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:1089625d-d8fd-59a4-8831-bb504604b0fc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-9823 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2025-11143",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:3fa45f5e-dd9c-5c05-824d-3d24b994089f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-11143 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2025-5115",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:7f090c14-8590-555f-b912-ac93d269d5ef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-5115 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2026-10050",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:06c2fd3b-a5bb-5b36-8c63-353768a5b821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-10050 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2026-10051",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:e22c3ec4-7748-5455-bd2f-7c379b54ec7e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-10051 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2026-1605",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:59915497-1b3e-53a9-bf04-a2dafed31aba",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-1605 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2026-18659",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:927ab0d2-07ec-5172-abc0-088e7b8d2341",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-18659 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2026-18660",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:c929914a-e82a-5ed8-9f85-6aab44fd66fd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-18660 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2026-18661",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:e4761285-a1a9-54c3-b5fc-29053afb62aa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-18661 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2026-18662",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:f502a60e-7e2b-5d33-94b3-a46d07f51e75",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-18662 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2026-19864",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:5c473098-eae2-53a0-9ea2-521afb843af3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-19864 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2026-2332",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:438e864e-5821-5068-918b-1702b3b99d10",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-2332 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2026-5795",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:01f32b9c-5416-5151-a6cb-0a4b72d8165d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-5795 is fixed in version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2026-6790",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:e2809157-acc2-59e3-8ada-4960cd4ca373",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-6790 affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    },
    {
      "id": "CVE-2026-8384",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:6d15e4a0-8601-54cb-a604-a24f6c614440",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-8384 does not affect version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions. not_affected \u2014 Jetty 9.4.58.v20250814 is not affected by CVE-2026-8384. The vulnerability exists only in Jetty 12's refactored canonicalPath() implementation that combines path decoding and canonicalization with slash-state tracking. Jetty 9.4 uses a two-stage architecture (decodePath() followed by canonicalPath()) that correctly normalizes paths containing semicolon path parameters before dot-dot segments, p...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "GHSA-58qw-p7qm-5rvh",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:cf79e396-0457-5e9d-9177-8276690d965e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 9.4.58.v20250814-tuxcare.7 of org.eclipse.jetty.memcached:jetty-memcached-sessions."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.eclipse.jetty.memcached/jetty-memcached-sessions@9.4.58.v20250814-tuxcare.7"
    }
  ]
}