{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:41cd2aad-822b-5d38-b3ae-a15f97308ab8",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622-tuxcare.3",
      "type": "library",
      "group": "org.eclipse.jetty",
      "name": "jetty-client",
      "version": "9.4.48.v20220622-tuxcare.3",
      "purl": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:98170d42-145e-5517-b0f6-ccd33773983e",
      "id": "CVE-2020-27216",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27216 affects version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty:jetty-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c293e85f-19a9-5dbe-9c0e-cb4076c52f3a",
      "id": "CVE-2021-28169",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28169 affects version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty:jetty-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72f5807a-8192-573f-b4ab-95bb08b23200",
      "id": "CVE-2021-34428",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-34428 affects version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty:jetty-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5130492c-c9bf-5e92-a973-d6ca01b17b2d",
      "id": "CVE-2023-26048",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-26048 is fixed in version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty:jetty-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df6d82e5-a2a2-5fb9-a2b7-6055397d37f0",
      "id": "CVE-2023-26049",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-26049 is fixed in version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty:jetty-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4202aa1d-a6b1-5d0b-a83d-0518a32383a8",
      "id": "CVE-2023-36478",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36478 affects version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty:jetty-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a33327b-50a4-58e3-a899-aa276c321d06",
      "id": "CVE-2023-36479",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-36479 is fixed in version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty:jetty-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d67f2063-d904-53de-9e2f-55b4aea24e53",
      "id": "CVE-2023-40167",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-40167 is fixed in version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty:jetty-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3fe0356-89d1-50f5-a76f-84e0909830cb",
      "id": "CVE-2023-41900",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-41900 is fixed in version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty:jetty-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cad5850a-a41a-5d2f-8ba1-cbb5226d49a3",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty:jetty-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aaa118d8-73df-568d-a912-bacd5531a841",
      "id": "CVE-2024-13009",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-13009 is fixed in version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty:jetty-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69cd12fa-90a0-5332-b398-b866bc630d6b",
      "id": "CVE-2024-22201",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22201 is fixed in version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty:jetty-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:839537e2-df86-564b-a73d-8df85c913115",
      "id": "CVE-2024-6762",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-6762 is fixed in version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty:jetty-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e6b0b89-ae73-5b7f-bb4f-7009fbf893ad",
      "id": "CVE-2024-6763",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6763 affects version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty:jetty-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b640aa6-9f8b-5b9f-b937-14a2a04d8030",
      "id": "CVE-2024-8184",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-8184 affects version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty:jetty-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd1b15e6-28b6-5823-a6eb-bb958e65e380",
      "id": "CVE-2024-9823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-9823 is fixed in version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty:jetty-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91560470-7690-56bb-8407-82e731243e2c",
      "id": "CVE-2025-11143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-11143 affects version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty:jetty-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a601c865-247c-5199-9bf1-8cc66ee18671",
      "id": "CVE-2025-5115",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-5115 is fixed in version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty:jetty-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eaaca3af-e3af-5bd2-ba7c-ee55114ac375",
      "id": "CVE-2026-1605",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-1605 affects version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty:jetty-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:126c6224-2f7c-53f6-bd22-5b38c5334e8a",
      "id": "CVE-2026-2332",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-2332 affects version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty:jetty-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:749f3da4-3317-5d71-a1be-99276ed95cef",
      "id": "GHSA-58qw-p7qm-5rvh",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-58qw-p7qm-5rvh is fixed in version 9.4.48.v20220622-tuxcare.3 of org.eclipse.jetty:jetty-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622-tuxcare.3"
    }
  ]
}