{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:182d7f61-6b10-5bbc-9b96-d946be0572e9",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty.fcgi/fcgi-server@9.4.48.v20220622-tuxcare.2",
      "type": "library",
      "group": "org.eclipse.jetty.fcgi",
      "name": "fcgi-server",
      "version": "9.4.48.v20220622-tuxcare.2",
      "purl": "pkg:maven/org.eclipse.jetty.fcgi/fcgi-server@9.4.48.v20220622-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:8d324a3a-f4f4-55e0-96b5-f3e841fc91b6",
      "id": "CVE-2020-27216",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27216 affects version 9.4.48.v20220622-tuxcare.2 of org.eclipse.jetty.fcgi:fcgi-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.fcgi/fcgi-server@9.4.48.v20220622-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d952127-7708-549d-9bda-d2c114a5e9d7",
      "id": "CVE-2021-28169",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28169 affects version 9.4.48.v20220622-tuxcare.2 of org.eclipse.jetty.fcgi:fcgi-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.fcgi/fcgi-server@9.4.48.v20220622-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2179d69-f865-51dd-90d8-9c00924a14a7",
      "id": "CVE-2021-34428",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-34428 affects version 9.4.48.v20220622-tuxcare.2 of org.eclipse.jetty.fcgi:fcgi-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.fcgi/fcgi-server@9.4.48.v20220622-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd40adc8-533f-5e1c-b897-9109f55b6053",
      "id": "CVE-2023-26048",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-26048 is fixed in version 9.4.48.v20220622-tuxcare.2 of org.eclipse.jetty.fcgi:fcgi-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.fcgi/fcgi-server@9.4.48.v20220622-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3c9df07-607c-542e-9697-31d1c23353f0",
      "id": "CVE-2023-26049",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-26049 is fixed in version 9.4.48.v20220622-tuxcare.2 of org.eclipse.jetty.fcgi:fcgi-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.fcgi/fcgi-server@9.4.48.v20220622-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6413704e-1538-50d1-8b44-d37f872f442d",
      "id": "CVE-2023-36478",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36478 affects version 9.4.48.v20220622-tuxcare.2 of org.eclipse.jetty.fcgi:fcgi-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.fcgi/fcgi-server@9.4.48.v20220622-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:578d0a05-1bff-592f-85f7-273165377be9",
      "id": "CVE-2023-36479",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-36479 is fixed in version 9.4.48.v20220622-tuxcare.2 of org.eclipse.jetty.fcgi:fcgi-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.fcgi/fcgi-server@9.4.48.v20220622-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9957a10b-0093-5c1e-8adb-0004364ba49b",
      "id": "CVE-2023-40167",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-40167 is fixed in version 9.4.48.v20220622-tuxcare.2 of org.eclipse.jetty.fcgi:fcgi-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.fcgi/fcgi-server@9.4.48.v20220622-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b6953b2-8c7a-59af-acf0-c831e98a958f",
      "id": "CVE-2023-41900",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-41900 is fixed in version 9.4.48.v20220622-tuxcare.2 of org.eclipse.jetty.fcgi:fcgi-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.fcgi/fcgi-server@9.4.48.v20220622-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da139107-3f8f-5659-9e5a-482c7000927f",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 9.4.48.v20220622-tuxcare.2 of org.eclipse.jetty.fcgi:fcgi-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.fcgi/fcgi-server@9.4.48.v20220622-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49a3b1c0-f27e-5140-91ec-734e80550b79",
      "id": "CVE-2024-13009",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-13009 is fixed in version 9.4.48.v20220622-tuxcare.2 of org.eclipse.jetty.fcgi:fcgi-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.fcgi/fcgi-server@9.4.48.v20220622-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:054447e3-73ff-5e43-9f65-8f2d1a784cff",
      "id": "CVE-2024-22201",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22201 is fixed in version 9.4.48.v20220622-tuxcare.2 of org.eclipse.jetty.fcgi:fcgi-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.fcgi/fcgi-server@9.4.48.v20220622-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70cea5d3-5387-578b-b6d7-74f56328f908",
      "id": "CVE-2024-6762",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-6762 is fixed in version 9.4.48.v20220622-tuxcare.2 of org.eclipse.jetty.fcgi:fcgi-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.fcgi/fcgi-server@9.4.48.v20220622-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5adf495-7cbd-5dc6-984b-b2b0a6663450",
      "id": "CVE-2024-6763",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6763 affects version 9.4.48.v20220622-tuxcare.2 of org.eclipse.jetty.fcgi:fcgi-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.fcgi/fcgi-server@9.4.48.v20220622-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:631e2afa-a2ad-5a74-ade0-3bf99593f7ec",
      "id": "CVE-2024-8184",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-8184 affects version 9.4.48.v20220622-tuxcare.2 of org.eclipse.jetty.fcgi:fcgi-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.fcgi/fcgi-server@9.4.48.v20220622-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:968eb2c9-e448-5838-a751-e9522ebd7160",
      "id": "CVE-2024-9823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-9823 is fixed in version 9.4.48.v20220622-tuxcare.2 of org.eclipse.jetty.fcgi:fcgi-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.fcgi/fcgi-server@9.4.48.v20220622-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12b0eae2-ac21-5ce8-bb9b-e51a4878d501",
      "id": "CVE-2025-11143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-11143 affects version 9.4.48.v20220622-tuxcare.2 of org.eclipse.jetty.fcgi:fcgi-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.fcgi/fcgi-server@9.4.48.v20220622-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47ff2bce-f589-582c-a017-b93d409dd33b",
      "id": "CVE-2025-5115",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-5115 is fixed in version 9.4.48.v20220622-tuxcare.2 of org.eclipse.jetty.fcgi:fcgi-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.fcgi/fcgi-server@9.4.48.v20220622-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:443b638a-2b52-5744-8782-40e68ef1f5b2",
      "id": "CVE-2026-1605",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-1605 affects version 9.4.48.v20220622-tuxcare.2 of org.eclipse.jetty.fcgi:fcgi-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.fcgi/fcgi-server@9.4.48.v20220622-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd4b3a06-8e19-582a-b652-40d490825dae",
      "id": "CVE-2026-2332",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-2332 affects version 9.4.48.v20220622-tuxcare.2 of org.eclipse.jetty.fcgi:fcgi-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.fcgi/fcgi-server@9.4.48.v20220622-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18e90a41-830e-5a6e-bbe3-7026d0d064f3",
      "id": "GHSA-58qw-p7qm-5rvh",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-58qw-p7qm-5rvh is fixed in version 9.4.48.v20220622-tuxcare.2 of org.eclipse.jetty.fcgi:fcgi-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.fcgi/fcgi-server@9.4.48.v20220622-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.eclipse.jetty.fcgi/fcgi-server@9.4.48.v20220622-tuxcare.2"
    }
  ]
}