{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4c7056c1-08ae-553b-8c4a-86cac471532a",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "websocket-jakarta-server",
      "purl": "pkg:maven/org.eclipse.jetty.websocket/websocket-jakarta-server@11.0.33.tuxcare0001",
      "type": "library",
      "group": "org.eclipse.jetty.websocket",
      "bom-ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jakarta-server@11.0.33.tuxcare0001",
      "version": "11.0.33.tuxcare0001",
      "pedigree": {
        "ancestors": [
          {
            "name": "websocket-jakarta-server",
            "purl": "pkg:maven/org.eclipse.jetty.websocket/websocket-jakarta-server@11.0.33",
            "type": "library",
            "group": "org.eclipse.jetty.websocket",
            "version": "11.0.33"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-12611",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jakarta-server@11.0.33.tuxcare0001"
        }
      ],
      "bom-ref": "urn:uuid:3bac7c23-8010-50af-857e-b321d39c558b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-12611 is fixed in version 11.0.33.tuxcare0001 of org.eclipse.jetty.websocket:websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2026-18659",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jakarta-server@11.0.33.tuxcare0001"
        }
      ],
      "bom-ref": "urn:uuid:009b438a-a395-53b8-b25d-18ba9c1146c1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-18659 is fixed in version 11.0.33.tuxcare0001 of org.eclipse.jetty.websocket:websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2026-18660",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jakarta-server@11.0.33.tuxcare0001"
        }
      ],
      "bom-ref": "urn:uuid:aee8a66e-4021-592d-bce4-1c756b1dab46",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-18660 is fixed in version 11.0.33.tuxcare0001 of org.eclipse.jetty.websocket:websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2026-18661",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jakarta-server@11.0.33.tuxcare0001"
        }
      ],
      "bom-ref": "urn:uuid:03b46878-dcaf-5933-80ed-9fbcc9df20ea",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-18661 is fixed in version 11.0.33.tuxcare0001 of org.eclipse.jetty.websocket:websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2026-18662",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jakarta-server@11.0.33.tuxcare0001"
        }
      ],
      "bom-ref": "urn:uuid:9a452661-05c4-5ebd-bfc7-834318c5ed9f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-18662 is fixed in version 11.0.33.tuxcare0001 of org.eclipse.jetty.websocket:websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2026-19203",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jakarta-server@11.0.33.tuxcare0001"
        }
      ],
      "bom-ref": "urn:uuid:7f55ed76-6fd2-525e-a977-6cceab1ac641",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-19203 is fixed in version 11.0.33.tuxcare0001 of org.eclipse.jetty.websocket:websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2026-19204",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jakarta-server@11.0.33.tuxcare0001"
        }
      ],
      "bom-ref": "urn:uuid:fb8f7c3e-08a4-5a1f-b01f-3c41b0949ada",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-19204 is fixed in version 11.0.33.tuxcare0001 of org.eclipse.jetty.websocket:websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2026-19864",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jakarta-server@11.0.33.tuxcare0001"
        }
      ],
      "bom-ref": "urn:uuid:29bc3d69-05cb-5fa4-8f94-a7a7aa277cf1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-19864 is fixed in version 11.0.33.tuxcare0001 of org.eclipse.jetty.websocket:websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2026-76182",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jakarta-server@11.0.33.tuxcare0001"
        }
      ],
      "bom-ref": "urn:uuid:e2fc5f16-969f-5a89-90a6-49d0a1ad0d07",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-76182 is fixed in version 11.0.33.tuxcare0001 of org.eclipse.jetty.websocket:websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2026-76184",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jakarta-server@11.0.33.tuxcare0001"
        }
      ],
      "bom-ref": "urn:uuid:2abbf1ad-a825-5de4-bae3-9d551cfb9a39",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-76184 is fixed in version 11.0.33.tuxcare0001 of org.eclipse.jetty.websocket:websocket-jakarta-server."
      }
    },
    {
      "id": "CVE-2026-77711",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jakarta-server@11.0.33.tuxcare0001"
        }
      ],
      "bom-ref": "urn:uuid:4458d532-19d3-5a47-9f90-546c25e3299e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-77711 is fixed in version 11.0.33.tuxcare0001 of org.eclipse.jetty.websocket:websocket-jakarta-server."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jakarta-server@11.0.33.tuxcare0001"
    }
  ]
}