{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:49c5ea83-9f08-5acf-81c9-c84b6c74448c",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-alpn-java-client@9.4.53.v20231009-tuxcare.1",
      "type": "library",
      "group": "org.eclipse.jetty",
      "name": "jetty-alpn-java-client",
      "version": "9.4.53.v20231009-tuxcare.1",
      "purl": "pkg:maven/org.eclipse.jetty/jetty-alpn-java-client@9.4.53.v20231009-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:4cbb42c9-be50-5e56-8fb7-185978406707",
      "id": "CVE-2020-25711",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-25711 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-alpn-java-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-alpn-java-client@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de1aafa5-a38f-53a9-8bf8-175803e45d43",
      "id": "CVE-2020-27216",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27216 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-alpn-java-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-alpn-java-client@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7622fa26-dc9a-5c59-b22f-7581f79a7bd3",
      "id": "CVE-2021-28169",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28169 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-alpn-java-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-alpn-java-client@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a6f5683-bd1a-59ca-8b25-3f14df3dd827",
      "id": "CVE-2021-34428",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-34428 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-alpn-java-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-alpn-java-client@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f95db34-0a2e-5a80-9090-b076537c4f6c",
      "id": "CVE-2023-36478",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36478 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-alpn-java-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-alpn-java-client@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78933bd8-e962-5a69-8270-c1b2f6d67e4c",
      "id": "CVE-2023-36479",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36479 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-alpn-java-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-alpn-java-client@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39730414-658a-5295-888d-c7590f8d810c",
      "id": "CVE-2023-40167",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40167 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-alpn-java-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-alpn-java-client@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12bf4c97-e4e3-585e-bfd8-ba013dd37088",
      "id": "CVE-2023-41900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-41900 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-alpn-java-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-alpn-java-client@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c1d6935-ab0b-5466-be4d-536e7534d214",
      "id": "CVE-2024-13009",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-13009 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-alpn-java-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-alpn-java-client@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad4ffc3f-d72b-5954-8b65-aef4037260cf",
      "id": "CVE-2024-22201",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22201 is fixed in version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-alpn-java-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-alpn-java-client@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0509dd63-9681-544b-a22a-b6ac387a9d60",
      "id": "CVE-2024-6762",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6762 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-alpn-java-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-alpn-java-client@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:698702eb-08be-5ae6-b485-e5f212031b03",
      "id": "CVE-2024-6763",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6763 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-alpn-java-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-alpn-java-client@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26ff9dd1-937a-5fa5-8196-4571be668c9e",
      "id": "CVE-2024-9823",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-9823 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-alpn-java-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-alpn-java-client@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7a6eee3-0690-5539-8482-c75c5c7a817e",
      "id": "CVE-2025-11143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-11143 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-alpn-java-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-alpn-java-client@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4055921-6381-5ee0-b085-0236eafed0a8",
      "id": "CVE-2025-1948",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-1948 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-alpn-java-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-alpn-java-client@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9db4ca6-978c-5254-9552-369a76f929d1",
      "id": "CVE-2025-5115",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-5115 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-alpn-java-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-alpn-java-client@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c1ba87f-1c04-527d-83d0-c8863ec634c6",
      "id": "CVE-2026-1605",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-1605 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-alpn-java-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-alpn-java-client@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2707613f-f834-5387-907c-de5c52cfbff4",
      "id": "CVE-2026-5795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-5795 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-alpn-java-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-alpn-java-client@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1111e066-5c03-5f54-b152-c47592394571",
      "id": "GHSA-58qw-p7qm-5rvh",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-alpn-java-client."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-alpn-java-client@9.4.53.v20231009-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-alpn-java-client@9.4.53.v20231009-tuxcare.1"
    }
  ]
}