{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2e61a100-66c6-5143-a744-515fe20d92dd",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty.http2/http2-client@9.4.53.v20231009-tuxcare.4",
      "type": "library",
      "group": "org.eclipse.jetty.http2",
      "name": "http2-client",
      "version": "9.4.53.v20231009-tuxcare.4",
      "purl": "pkg:maven/org.eclipse.jetty.http2/http2-client@9.4.53.v20231009-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:2dae697f-be17-567a-bafd-979fc05e1deb",
      "id": "CVE-2020-25711",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-25711 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty.http2:http2-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-client@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3411f984-89d6-5225-9c18-09e1810340b5",
      "id": "CVE-2020-27216",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27216 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty.http2:http2-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-client@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc15a942-8c0e-5c98-9f95-44ea57cf5773",
      "id": "CVE-2021-28169",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28169 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty.http2:http2-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-client@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60339b7b-b063-5df6-9205-bbe4e3f7f43f",
      "id": "CVE-2021-34428",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-34428 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty.http2:http2-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-client@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f9adba0-d597-595e-a54f-846e0c4b449e",
      "id": "CVE-2023-36478",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36478 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty.http2:http2-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-client@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:460f07d6-f3f8-57a1-9e1c-34d00f6b0a3e",
      "id": "CVE-2023-36479",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36479 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty.http2:http2-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-client@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:646dc6e8-47d7-5183-a17d-302f6bfd6195",
      "id": "CVE-2023-40167",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40167 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty.http2:http2-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-client@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d17c703c-1cf7-5fba-83bd-86513edad8ed",
      "id": "CVE-2023-41900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-41900 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty.http2:http2-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-client@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd28886d-d771-5e4e-ada6-86fa1cee6a89",
      "id": "CVE-2024-13009",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-13009 is fixed in version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty.http2:http2-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-client@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8252c39d-799f-5c27-9960-3b45b466781a",
      "id": "CVE-2024-22201",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22201 is fixed in version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty.http2:http2-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-client@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c808d4a8-7e0e-5b3f-8482-83e49c52da1d",
      "id": "CVE-2024-6762",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-6762 is fixed in version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty.http2:http2-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-client@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa2f7327-24a9-5031-abbe-9c4f1c8f131c",
      "id": "CVE-2024-6763",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-6763 is fixed in version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty.http2:http2-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-client@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:932b1eb9-eb96-5efc-8c30-9369c6a4a12a",
      "id": "CVE-2024-9823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-9823 is fixed in version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty.http2:http2-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-client@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5434e65f-f5c2-5bb3-b7cb-10c805b27d48",
      "id": "CVE-2025-11143",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-11143 is fixed in version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty.http2:http2-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-client@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e394a278-065d-5254-a73d-9db38f439d15",
      "id": "CVE-2025-1948",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-1948 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty.http2:http2-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-client@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4106f863-0995-5d32-a760-e0a5d5aaecf4",
      "id": "CVE-2025-5115",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-5115 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty.http2:http2-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-client@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f135a3e2-e196-55cf-b2e1-6cb4e9f5e8d0",
      "id": "CVE-2026-1605",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-1605 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty.http2:http2-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-client@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1dcd1eba-f407-58db-9131-79ed4dd1b945",
      "id": "CVE-2026-2332",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-2332 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty.http2:http2-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-client@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:812cd765-76b1-5dc3-9570-e2d46f6d8c82",
      "id": "CVE-2026-5795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-5795 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty.http2:http2-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-client@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2ff117a-4f29-5fb6-b87e-d39654d1e87c",
      "id": "GHSA-58qw-p7qm-5rvh",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty.http2:http2-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-client@9.4.53.v20231009-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.eclipse.jetty.http2/http2-client@9.4.53.v20231009-tuxcare.4"
    }
  ]
}