{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ae1f69f3-978d-5c22-bf8d-e46d819fafd4",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1",
      "type": "library",
      "group": "org.eclipse.jetty",
      "name": "jetty-server",
      "version": "9.4.50.v20221201-tuxcare.1",
      "purl": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:3ae43456-a1fa-5654-87e5-484f7f6752df",
      "id": "CVE-2020-25711",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-25711 affects version 9.4.50.v20221201-tuxcare.1 of org.eclipse.jetty:jetty-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:170bdc72-1d70-5174-8307-0a3579893aa2",
      "id": "CVE-2020-27216",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27216 affects version 9.4.50.v20221201-tuxcare.1 of org.eclipse.jetty:jetty-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55d6b2af-769c-533d-a533-18d435aa8069",
      "id": "CVE-2021-28169",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28169 affects version 9.4.50.v20221201-tuxcare.1 of org.eclipse.jetty:jetty-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8999ec74-1971-5203-b261-04717f4dbcea",
      "id": "CVE-2021-34428",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-34428 affects version 9.4.50.v20221201-tuxcare.1 of org.eclipse.jetty:jetty-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53978489-4fde-5451-afb3-4ffa88e3f4b3",
      "id": "CVE-2023-26048",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-26048 is fixed in version 9.4.50.v20221201-tuxcare.1 of org.eclipse.jetty:jetty-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e287baa9-5f38-5345-9875-e87ac0781f4b",
      "id": "CVE-2023-26049",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-26049 is fixed in version 9.4.50.v20221201-tuxcare.1 of org.eclipse.jetty:jetty-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:abf5f929-4280-5379-a451-cbf41f27f6f8",
      "id": "CVE-2023-36478",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36478 affects version 9.4.50.v20221201-tuxcare.1 of org.eclipse.jetty:jetty-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bb70777-4345-5bde-8028-dc767204c5b1",
      "id": "CVE-2023-36479",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-36479 is fixed in version 9.4.50.v20221201-tuxcare.1 of org.eclipse.jetty:jetty-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba3ef03b-2788-5f58-8d21-bff6f07cd091",
      "id": "CVE-2023-40167",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-40167 is fixed in version 9.4.50.v20221201-tuxcare.1 of org.eclipse.jetty:jetty-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ecaa411-735b-5b1a-a574-9f1ffcbc9946",
      "id": "CVE-2023-41900",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-41900 is fixed in version 9.4.50.v20221201-tuxcare.1 of org.eclipse.jetty:jetty-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ee377a7-9af6-50f8-9bce-1077e1cddb9a",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 9.4.50.v20221201-tuxcare.1 of org.eclipse.jetty:jetty-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:947c170c-0345-5d21-94f5-b7f2039de8f6",
      "id": "CVE-2024-13009",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-13009 is fixed in version 9.4.50.v20221201-tuxcare.1 of org.eclipse.jetty:jetty-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3276a346-6891-525f-826a-9f981d682d83",
      "id": "CVE-2024-22201",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22201 is fixed in version 9.4.50.v20221201-tuxcare.1 of org.eclipse.jetty:jetty-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90b9eeea-de1a-59c6-8ce3-94ae2ce35e4c",
      "id": "CVE-2024-6762",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-6762 is fixed in version 9.4.50.v20221201-tuxcare.1 of org.eclipse.jetty:jetty-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2b676f7-74ca-55dc-8044-8da8984c300a",
      "id": "CVE-2024-6763",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6763 affects version 9.4.50.v20221201-tuxcare.1 of org.eclipse.jetty:jetty-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c6f27c1-4484-5539-aa6f-adb8ac250d0a",
      "id": "CVE-2024-8184",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-8184 is fixed in version 9.4.50.v20221201-tuxcare.1 of org.eclipse.jetty:jetty-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:997d2d58-967e-56e1-b3c2-58580fc53673",
      "id": "CVE-2024-9823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-9823 is fixed in version 9.4.50.v20221201-tuxcare.1 of org.eclipse.jetty:jetty-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03a676c7-13f0-540f-84cc-531938a90c8b",
      "id": "CVE-2025-11143",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-11143 is fixed in version 9.4.50.v20221201-tuxcare.1 of org.eclipse.jetty:jetty-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d73ae5dd-b253-59a5-9a59-b7b1aba00779",
      "id": "CVE-2025-5115",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-5115 affects version 9.4.50.v20221201-tuxcare.1 of org.eclipse.jetty:jetty-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25dd30b9-4c43-56e9-bb0a-9361049980fd",
      "id": "CVE-2026-1605",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-1605 affects version 9.4.50.v20221201-tuxcare.1 of org.eclipse.jetty:jetty-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b876fb0-6d50-5e0a-8f17-e91e98888ca4",
      "id": "CVE-2026-2332",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-2332 affects version 9.4.50.v20221201-tuxcare.1 of org.eclipse.jetty:jetty-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00c2eb88-50e8-557f-965e-10d7640f8148",
      "id": "CVE-2026-5795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-5795 affects version 9.4.50.v20221201-tuxcare.1 of org.eclipse.jetty:jetty-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00eae1a0-e124-5f36-b97a-8b09e37ac296",
      "id": "GHSA-58qw-p7qm-5rvh",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-58qw-p7qm-5rvh is fixed in version 9.4.50.v20221201-tuxcare.1 of org.eclipse.jetty:jetty-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201-tuxcare.1"
    }
  ]
}