{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d215bc1f-5f10-5427-a81d-7e0481ecb2fc",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/infinispan-embedded@9.4.53.v20231009-tuxcare.4",
      "type": "library",
      "group": "org.eclipse.jetty",
      "name": "infinispan-embedded",
      "version": "9.4.53.v20231009-tuxcare.4",
      "purl": "pkg:maven/org.eclipse.jetty/infinispan-embedded@9.4.53.v20231009-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:8cf7da54-832e-517f-a260-1fce161c9bbc",
      "id": "CVE-2020-25711",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-25711 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty:infinispan-embedded."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/infinispan-embedded@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5642f075-5a8a-5968-ad2a-99ae3ab81a6d",
      "id": "CVE-2020-27216",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27216 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty:infinispan-embedded."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/infinispan-embedded@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:792db594-ac30-5e88-8629-2ccda4ed9778",
      "id": "CVE-2021-28169",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28169 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty:infinispan-embedded."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/infinispan-embedded@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:087391d7-05ef-5080-9e2f-22fff0d7442c",
      "id": "CVE-2021-34428",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-34428 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty:infinispan-embedded."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/infinispan-embedded@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ec1c19c-89b2-58e0-a644-cb73303b8504",
      "id": "CVE-2023-36478",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36478 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty:infinispan-embedded."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/infinispan-embedded@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:def65d51-8b90-5af4-ad70-0dcd0e301f7f",
      "id": "CVE-2023-36479",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36479 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty:infinispan-embedded."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/infinispan-embedded@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70450306-c7f8-595b-9413-448a391c0486",
      "id": "CVE-2023-40167",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40167 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty:infinispan-embedded."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/infinispan-embedded@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a62ab10d-5578-5037-a674-d7b67739e61e",
      "id": "CVE-2023-41900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-41900 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty:infinispan-embedded."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/infinispan-embedded@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:199eaa88-3a35-52ba-abd3-b347a260e858",
      "id": "CVE-2024-13009",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-13009 is fixed in version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty:infinispan-embedded."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/infinispan-embedded@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:052bbc01-ebed-5a4a-a000-4e7568537108",
      "id": "CVE-2024-22201",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22201 is fixed in version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty:infinispan-embedded."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/infinispan-embedded@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b562eeb3-34b8-529c-b63f-0793c769acfb",
      "id": "CVE-2024-6762",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-6762 is fixed in version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty:infinispan-embedded."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/infinispan-embedded@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3517987-4038-53be-9a4d-3f3392b67a95",
      "id": "CVE-2024-6763",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-6763 is fixed in version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty:infinispan-embedded."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/infinispan-embedded@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31b20c48-c0b9-5bac-9c20-7552c889e1b1",
      "id": "CVE-2024-9823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-9823 is fixed in version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty:infinispan-embedded."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/infinispan-embedded@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf4dfdab-d556-5157-867a-c07f944d9f30",
      "id": "CVE-2025-11143",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-11143 is fixed in version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty:infinispan-embedded."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/infinispan-embedded@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e12a82aa-4d57-596c-867f-18116d82c7da",
      "id": "CVE-2025-1948",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-1948 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty:infinispan-embedded."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/infinispan-embedded@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9eba0bea-097a-5e80-8db5-bd628cb712f7",
      "id": "CVE-2025-5115",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-5115 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty:infinispan-embedded."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/infinispan-embedded@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75b985d6-e068-556e-8d9a-829ce2f64a5c",
      "id": "CVE-2026-1605",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-1605 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty:infinispan-embedded."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/infinispan-embedded@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:798374b9-ad8c-5c76-87ba-09d41e3306ac",
      "id": "CVE-2026-2332",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-2332 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty:infinispan-embedded."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/infinispan-embedded@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1747649b-8ce7-5144-b27f-6f18a3a39658",
      "id": "CVE-2026-5795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-5795 affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty:infinispan-embedded."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/infinispan-embedded@9.4.53.v20231009-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e240a44a-1d05-5582-8c25-d36a5129141d",
      "id": "GHSA-58qw-p7qm-5rvh",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 9.4.53.v20231009-tuxcare.4 of org.eclipse.jetty:infinispan-embedded."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/infinispan-embedded@9.4.53.v20231009-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.eclipse.jetty/infinispan-embedded@9.4.53.v20231009-tuxcare.4"
    }
  ]
}