{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9c159679-ac5c-5e13-8555-3eaef25e872f",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty.http2/http2-http-client-transport@9.4.48.v20220622-tuxcare.3",
      "type": "library",
      "group": "org.eclipse.jetty.http2",
      "name": "http2-http-client-transport",
      "version": "9.4.48.v20220622-tuxcare.3",
      "purl": "pkg:maven/org.eclipse.jetty.http2/http2-http-client-transport@9.4.48.v20220622-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:6d6b69ca-d2e8-5ea8-89b7-c5b21101c73f",
      "id": "CVE-2020-27216",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27216 affects version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty.http2:http2-http-client-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-http-client-transport@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a41f4699-cebc-54bb-8689-3a495058ff1e",
      "id": "CVE-2021-28169",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28169 affects version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty.http2:http2-http-client-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-http-client-transport@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83746b40-3c86-5183-b1f9-57f5c2aacbfe",
      "id": "CVE-2021-34428",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-34428 affects version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty.http2:http2-http-client-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-http-client-transport@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09810d29-0803-55f1-a1c8-5240ad268a85",
      "id": "CVE-2023-26048",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-26048 is fixed in version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty.http2:http2-http-client-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-http-client-transport@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7dae006e-e5dc-5e97-93a3-f305691a1413",
      "id": "CVE-2023-26049",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-26049 is fixed in version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty.http2:http2-http-client-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-http-client-transport@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66636d03-20ff-56f4-9054-7d3857a14fba",
      "id": "CVE-2023-36478",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36478 affects version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty.http2:http2-http-client-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-http-client-transport@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f866d6ed-0993-5aeb-8632-edd166d1e336",
      "id": "CVE-2023-36479",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-36479 is fixed in version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty.http2:http2-http-client-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-http-client-transport@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff571130-9bb1-5115-bf95-e16fce2f789f",
      "id": "CVE-2023-40167",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-40167 is fixed in version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty.http2:http2-http-client-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-http-client-transport@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2f09d31-84eb-59cb-8648-cad4985fdcfa",
      "id": "CVE-2023-41900",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-41900 is fixed in version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty.http2:http2-http-client-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-http-client-transport@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09414213-d7ac-516b-93f2-b6f4f841364b",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty.http2:http2-http-client-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-http-client-transport@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca8ff515-63ff-5341-8b2d-7e2ec548b32c",
      "id": "CVE-2024-13009",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-13009 is fixed in version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty.http2:http2-http-client-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-http-client-transport@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:231e9508-703e-5af7-a231-e01ef671b136",
      "id": "CVE-2024-22201",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22201 is fixed in version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty.http2:http2-http-client-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-http-client-transport@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7cca1918-132c-5107-9296-0c5069f78de4",
      "id": "CVE-2024-6762",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-6762 is fixed in version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty.http2:http2-http-client-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-http-client-transport@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a58198d-3a9a-5828-9b7a-218b0ae36940",
      "id": "CVE-2024-6763",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6763 affects version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty.http2:http2-http-client-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-http-client-transport@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44679f34-d931-510f-b254-2d53c70ba846",
      "id": "CVE-2024-8184",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-8184 affects version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty.http2:http2-http-client-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-http-client-transport@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e63cacc2-3482-5fd8-8d3a-1cc520e94048",
      "id": "CVE-2024-9823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-9823 is fixed in version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty.http2:http2-http-client-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-http-client-transport@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db229c98-7900-5d37-92d3-2cd5e2e70195",
      "id": "CVE-2025-11143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-11143 affects version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty.http2:http2-http-client-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-http-client-transport@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6177677f-ca15-5aad-a263-4af75026e837",
      "id": "CVE-2025-5115",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-5115 is fixed in version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty.http2:http2-http-client-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-http-client-transport@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02c906e4-b035-54c7-b7aa-3f349fa4eb40",
      "id": "CVE-2026-1605",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-1605 affects version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty.http2:http2-http-client-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-http-client-transport@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:520d0146-9d2e-5737-841e-66518b967fed",
      "id": "CVE-2026-2332",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-2332 affects version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty.http2:http2-http-client-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-http-client-transport@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9bb880bc-ef0b-5839-9425-5773e4d64189",
      "id": "GHSA-58qw-p7qm-5rvh",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-58qw-p7qm-5rvh is fixed in version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty.http2:http2-http-client-transport."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-http-client-transport@9.4.48.v20220622-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.eclipse.jetty.http2/http2-http-client-transport@9.4.48.v20220622-tuxcare.3"
    }
  ]
}