{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b789b495-adaa-57a2-ae36-4c43101deae8",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty.http2/http2-server@9.4.53.v20231009-tuxcare.1",
      "type": "library",
      "group": "org.eclipse.jetty.http2",
      "name": "http2-server",
      "version": "9.4.53.v20231009-tuxcare.1",
      "purl": "pkg:maven/org.eclipse.jetty.http2/http2-server@9.4.53.v20231009-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:a498d232-1f33-5b6c-8ed8-d322b9c1b573",
      "id": "CVE-2020-25711",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-25711 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty.http2:http2-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-server@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46f80b40-b110-551d-a288-fc0e543c5378",
      "id": "CVE-2020-27216",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27216 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty.http2:http2-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-server@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8b8f3aa-4925-574a-815f-70d15c156538",
      "id": "CVE-2021-28169",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28169 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty.http2:http2-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-server@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3d84b11-42b7-555b-afc0-faea8561e0f8",
      "id": "CVE-2021-34428",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-34428 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty.http2:http2-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-server@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc2b1343-6aa9-5cd8-a4bd-a8f1c7f7dc23",
      "id": "CVE-2023-36478",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36478 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty.http2:http2-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-server@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:969409e2-9cfe-5a58-8657-eb38766e37e4",
      "id": "CVE-2023-36479",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36479 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty.http2:http2-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-server@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6aff5220-b927-5047-b002-8f3b5772432f",
      "id": "CVE-2023-40167",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40167 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty.http2:http2-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-server@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0bd9f429-5c95-5570-851e-076e014bc333",
      "id": "CVE-2023-41900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-41900 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty.http2:http2-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-server@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c037fac-014d-59f1-a37d-3045ddba7482",
      "id": "CVE-2024-13009",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-13009 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty.http2:http2-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-server@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95dbe836-2d0a-5844-a525-2c72d51b89f6",
      "id": "CVE-2024-22201",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22201 is fixed in version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty.http2:http2-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-server@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f59c00d-e99a-530f-af6d-4ade79e020c5",
      "id": "CVE-2024-6762",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6762 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty.http2:http2-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-server@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1202edd7-d309-599a-bee6-104b35679ba5",
      "id": "CVE-2024-6763",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6763 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty.http2:http2-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-server@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a34d4556-21cd-5f0f-a269-ec0e0277e5ac",
      "id": "CVE-2024-9823",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-9823 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty.http2:http2-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-server@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5e63dd1-b01c-5d0b-9990-5deb92e1c13a",
      "id": "CVE-2025-11143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-11143 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty.http2:http2-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-server@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bee608b-2910-591e-9679-9074dee4e746",
      "id": "CVE-2025-1948",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-1948 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty.http2:http2-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-server@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14f8b887-316d-536b-9d16-02bc8425c403",
      "id": "CVE-2025-5115",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-5115 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty.http2:http2-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-server@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ece7534-c6a8-554f-b2d6-4009836f071c",
      "id": "CVE-2026-1605",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-1605 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty.http2:http2-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-server@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efd25b0d-a2e8-57a8-ae95-b94c59b4c9c4",
      "id": "CVE-2026-5795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-5795 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty.http2:http2-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-server@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e6ecadc-6067-590e-96fd-90dca51ff7d2",
      "id": "GHSA-58qw-p7qm-5rvh",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty.http2:http2-server."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.http2/http2-server@9.4.53.v20231009-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.eclipse.jetty.http2/http2-server@9.4.53.v20231009-tuxcare.1"
    }
  ]
}