{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9ea714c2-ba13-5c18-9693-97d985c0c609",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.53.v20231009-tuxcare.5",
      "type": "library",
      "group": "org.eclipse.jetty",
      "name": "jetty-util-ajax",
      "version": "9.4.53.v20231009-tuxcare.5",
      "purl": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.53.v20231009-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:5660c48f-e4ad-5437-b30d-077a30d788b2",
      "id": "CVE-2020-25711",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-25711 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty:jetty-util-ajax."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:543c4268-613e-5e33-9f3d-68e11af9709f",
      "id": "CVE-2020-27216",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27216 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty:jetty-util-ajax."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a8b5ca6-3dce-5eb7-920c-f8d5e9a53bbf",
      "id": "CVE-2021-28169",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28169 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty:jetty-util-ajax."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f9b1d98-1df3-5a69-9567-9f9b0375e41e",
      "id": "CVE-2021-34428",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-34428 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty:jetty-util-ajax."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13a254c8-c38e-52f2-8948-9d9c2198d5da",
      "id": "CVE-2023-36478",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36478 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty:jetty-util-ajax."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12e08dca-e293-5f0b-95c0-5b59e5e0a277",
      "id": "CVE-2023-36479",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36479 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty:jetty-util-ajax."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86406c4d-713b-50ca-87bb-14ae2c98b1d6",
      "id": "CVE-2023-40167",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40167 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty:jetty-util-ajax."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46db2109-8f7b-5f39-9f75-48613c6fb619",
      "id": "CVE-2023-41900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-41900 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty:jetty-util-ajax."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6de45588-b9fe-5277-b214-6cc3cbab475c",
      "id": "CVE-2024-13009",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-13009 is fixed in version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty:jetty-util-ajax."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1a61871-dc45-567c-b1d5-beb6bf6cd120",
      "id": "CVE-2024-22201",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22201 is fixed in version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty:jetty-util-ajax."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7046bcc0-49f4-53e7-97b6-866ec02af3c3",
      "id": "CVE-2024-6762",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-6762 is fixed in version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty:jetty-util-ajax."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c6c6f9c-e465-5fcc-a3c8-1151803a2187",
      "id": "CVE-2024-6763",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-6763 is fixed in version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty:jetty-util-ajax."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18d65252-1a8d-5c69-9fec-4b730f27e0c1",
      "id": "CVE-2024-9823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-9823 is fixed in version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty:jetty-util-ajax."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70383ae4-3b99-5a78-a1d8-189b017976f4",
      "id": "CVE-2025-11143",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-11143 is fixed in version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty:jetty-util-ajax."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b516399a-147e-547e-8dc3-369623c68f0e",
      "id": "CVE-2025-1948",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-1948 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty:jetty-util-ajax."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9eb110db-fd25-579b-9617-dc6b670c27a5",
      "id": "CVE-2025-5115",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-5115 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty:jetty-util-ajax."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2cb25ab-1c18-5fe6-86dd-d84443fbe890",
      "id": "CVE-2026-1605",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-1605 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty:jetty-util-ajax."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7771085c-0e05-5c80-9c4d-e58dde8a0b4a",
      "id": "CVE-2026-2332",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-2332 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty:jetty-util-ajax."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ad526db-0992-5f4b-8ea6-4b74899e2b26",
      "id": "CVE-2026-5795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-5795 affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty:jetty-util-ajax."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.53.v20231009-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3653015-547f-5f2e-9618-aab4d8a92626",
      "id": "GHSA-58qw-p7qm-5rvh",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 9.4.53.v20231009-tuxcare.5 of org.eclipse.jetty:jetty-util-ajax."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.53.v20231009-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.53.v20231009-tuxcare.5"
    }
  ]
}