{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:42b45d2c-1a6c-51dc-919c-a9f9d81b714a",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty.osgi/jetty-httpservice@9.4.53.v20231009-tuxcare.5",
      "type": "library",
      "group": "org.eclipse.jetty.osgi",
      "name": "jetty-httpservice",
      "version": "9.4.53.v20231009-tuxcare.5",
      "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-httpservice@9.4.53.v20231009-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:f0efdf20-d587-59aa-866d-c8158517992d",
      "id": "CVE-2020-25711",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-25711 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty.osgi:jetty-httpservice."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.osgi/jetty-httpservice@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03d86f5b-2f1b-5b91-bf04-2de26d8362de",
      "id": "CVE-2020-27216",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27216 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty.osgi:jetty-httpservice."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.osgi/jetty-httpservice@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c8b8c8d-9e7a-5ed5-8ff8-5f47a48b635c",
      "id": "CVE-2021-28169",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28169 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty.osgi:jetty-httpservice."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.osgi/jetty-httpservice@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25d0844d-5c0f-5ac0-ba81-22d187f0ec76",
      "id": "CVE-2021-34428",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-34428 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty.osgi:jetty-httpservice."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.osgi/jetty-httpservice@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5b0f170-a772-5160-a158-a44c7afa0803",
      "id": "CVE-2023-36478",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36478 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty.osgi:jetty-httpservice."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.osgi/jetty-httpservice@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:252a692d-c94f-5a96-bfc0-b7a508b7879a",
      "id": "CVE-2023-36479",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36479 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty.osgi:jetty-httpservice."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.osgi/jetty-httpservice@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36e5943a-e64b-5a17-ad40-66aca8011b41",
      "id": "CVE-2023-40167",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40167 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty.osgi:jetty-httpservice."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.osgi/jetty-httpservice@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f28bb698-05ca-5911-a7c6-c4cdab3178b8",
      "id": "CVE-2023-41900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-41900 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty.osgi:jetty-httpservice."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.osgi/jetty-httpservice@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c4efc97-67ff-5cf7-93c7-6d4283626224",
      "id": "CVE-2024-13009",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-13009 is fixed in version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty.osgi:jetty-httpservice."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.osgi/jetty-httpservice@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8458f4b1-3c4e-5b0f-9292-af848d0df696",
      "id": "CVE-2024-22201",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22201 is fixed in version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty.osgi:jetty-httpservice."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.osgi/jetty-httpservice@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:694294d4-f8d4-516d-be49-edb8895c9b9e",
      "id": "CVE-2024-6762",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-6762 is fixed in version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty.osgi:jetty-httpservice."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.osgi/jetty-httpservice@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68f956ed-4759-5c52-a8a0-e30721f41e98",
      "id": "CVE-2024-6763",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-6763 is fixed in version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty.osgi:jetty-httpservice."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.osgi/jetty-httpservice@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c654dfb-828d-5ec4-b224-e4fae5db383a",
      "id": "CVE-2024-9823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-9823 is fixed in version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty.osgi:jetty-httpservice."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.osgi/jetty-httpservice@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7b8679f-bdf9-5eb1-80f0-baa8ccebbacb",
      "id": "CVE-2025-11143",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-11143 is fixed in version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty.osgi:jetty-httpservice."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.osgi/jetty-httpservice@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3510e509-fb70-5431-adbe-89c3b9c7100c",
      "id": "CVE-2025-1948",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-1948 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty.osgi:jetty-httpservice."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.osgi/jetty-httpservice@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4856b5e0-b3a8-5e66-a5ba-5717588c18c4",
      "id": "CVE-2025-5115",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-5115 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty.osgi:jetty-httpservice."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.osgi/jetty-httpservice@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c620a2cc-905a-5b79-be5b-3eb547a6ec74",
      "id": "CVE-2026-1605",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-1605 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty.osgi:jetty-httpservice."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.osgi/jetty-httpservice@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95edf84e-0534-5765-9256-ffd347dbee58",
      "id": "CVE-2026-2332",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-2332 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty.osgi:jetty-httpservice."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.osgi/jetty-httpservice@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:319f26b4-e3f8-5485-8a34-e75715633680",
      "id": "CVE-2026-5795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-5795 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty.osgi:jetty-httpservice."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.osgi/jetty-httpservice@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:879431ee-98a9-55f4-80ca-89c4e2eba0e0",
      "id": "GHSA-58qw-p7qm-5rvh",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty.osgi:jetty-httpservice."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.osgi/jetty-httpservice@9.4.53.v20231009-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.eclipse.jetty.osgi/jetty-httpservice@9.4.53.v20231009-tuxcare.5"
    }
  ]
}