{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:3c911c9b-1a55-5093-9d30-58745630eb8f",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "websocket-jetty-server",
      "purl": "pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-server@10.0.33.tuxcare0001",
      "type": "library",
      "group": "org.eclipse.jetty.websocket",
      "bom-ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-server@10.0.33.tuxcare0001",
      "version": "10.0.33.tuxcare0001",
      "pedigree": {
        "ancestors": [
          {
            "name": "websocket-jetty-server",
            "purl": "pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-server@10.0.33",
            "type": "library",
            "group": "org.eclipse.jetty.websocket",
            "version": "10.0.33"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-10050",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-server@10.0.33.tuxcare0001"
        }
      ],
      "bom-ref": "urn:uuid:eb98a942-4aff-592f-886c-2ac24bac839e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-10050 affects version 10.0.33.tuxcare0001 of org.eclipse.jetty.websocket:websocket-jetty-server."
      }
    },
    {
      "id": "CVE-2026-12611",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-server@10.0.33.tuxcare0001"
        }
      ],
      "bom-ref": "urn:uuid:371e1559-99a5-577c-a355-e68637a693d2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-12611 is fixed in version 10.0.33.tuxcare0001 of org.eclipse.jetty.websocket:websocket-jetty-server."
      }
    },
    {
      "id": "CVE-2026-18659",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-server@10.0.33.tuxcare0001"
        }
      ],
      "bom-ref": "urn:uuid:207776bf-7423-511c-af00-fe056318ba0c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-18659 is fixed in version 10.0.33.tuxcare0001 of org.eclipse.jetty.websocket:websocket-jetty-server."
      }
    },
    {
      "id": "CVE-2026-18660",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-server@10.0.33.tuxcare0001"
        }
      ],
      "bom-ref": "urn:uuid:b56d6ff9-5691-5b6b-bc32-805882606d0a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-18660 is fixed in version 10.0.33.tuxcare0001 of org.eclipse.jetty.websocket:websocket-jetty-server."
      }
    },
    {
      "id": "CVE-2026-18661",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-server@10.0.33.tuxcare0001"
        }
      ],
      "bom-ref": "urn:uuid:3eef4f74-e930-503c-b188-1a94fe578844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-18661 is fixed in version 10.0.33.tuxcare0001 of org.eclipse.jetty.websocket:websocket-jetty-server."
      }
    },
    {
      "id": "CVE-2026-18662",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-server@10.0.33.tuxcare0001"
        }
      ],
      "bom-ref": "urn:uuid:11a18e78-5173-5907-8e6f-a7ed7a7735a7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-18662 is fixed in version 10.0.33.tuxcare0001 of org.eclipse.jetty.websocket:websocket-jetty-server."
      }
    },
    {
      "id": "CVE-2026-19203",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-server@10.0.33.tuxcare0001"
        }
      ],
      "bom-ref": "urn:uuid:d5ec8800-7e22-52f9-9a92-cf4a59520ac4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-19203 is fixed in version 10.0.33.tuxcare0001 of org.eclipse.jetty.websocket:websocket-jetty-server."
      }
    },
    {
      "id": "CVE-2026-19204",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-server@10.0.33.tuxcare0001"
        }
      ],
      "bom-ref": "urn:uuid:918f31e7-a712-5611-8eb0-dc1115c3772b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-19204 is fixed in version 10.0.33.tuxcare0001 of org.eclipse.jetty.websocket:websocket-jetty-server."
      }
    },
    {
      "id": "CVE-2026-19864",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-server@10.0.33.tuxcare0001"
        }
      ],
      "bom-ref": "urn:uuid:54f4cd0a-e3f2-545a-b58b-fb72047851ff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-19864 is fixed in version 10.0.33.tuxcare0001 of org.eclipse.jetty.websocket:websocket-jetty-server."
      }
    },
    {
      "id": "CVE-2026-76182",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-server@10.0.33.tuxcare0001"
        }
      ],
      "bom-ref": "urn:uuid:18086866-0c5b-5519-aa75-b636dd637709",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-76182 is fixed in version 10.0.33.tuxcare0001 of org.eclipse.jetty.websocket:websocket-jetty-server."
      }
    },
    {
      "id": "CVE-2026-76184",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-server@10.0.33.tuxcare0001"
        }
      ],
      "bom-ref": "urn:uuid:99c1c69a-1d1a-5773-a2f8-40dcf54fc05d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-76184 is fixed in version 10.0.33.tuxcare0001 of org.eclipse.jetty.websocket:websocket-jetty-server."
      }
    },
    {
      "id": "CVE-2026-77711",
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-server@10.0.33.tuxcare0001"
        }
      ],
      "bom-ref": "urn:uuid:bcba55b4-7a84-5482-97b5-2dcf3e4c8c99",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-77711 is fixed in version 10.0.33.tuxcare0001 of org.eclipse.jetty.websocket:websocket-jetty-server."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-server@10.0.33.tuxcare0001"
    }
  ]
}