{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:8be7f1fb-f64e-51ce-9367-657fcf9e481a",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-hazelcast@9.4.53.v20231009-tuxcare.1",
      "type": "library",
      "group": "org.eclipse.jetty",
      "name": "jetty-hazelcast",
      "version": "9.4.53.v20231009-tuxcare.1",
      "purl": "pkg:maven/org.eclipse.jetty/jetty-hazelcast@9.4.53.v20231009-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:1b8a6766-76a6-5f63-b414-35e839be0937",
      "id": "CVE-2020-25711",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-25711 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-hazelcast."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-hazelcast@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a0c1980-1026-5e48-9b65-41aa08057bf9",
      "id": "CVE-2020-27216",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27216 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-hazelcast."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-hazelcast@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d359bd36-6c18-5b81-9e9e-e987491067db",
      "id": "CVE-2021-28169",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28169 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-hazelcast."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-hazelcast@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef299960-fae1-5b38-80f5-b2358e547e3e",
      "id": "CVE-2021-34428",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-34428 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-hazelcast."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-hazelcast@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78ef3163-829e-53d7-9530-90c78018b296",
      "id": "CVE-2023-36478",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36478 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-hazelcast."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-hazelcast@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dacc913d-023f-53d6-954c-29636afd906d",
      "id": "CVE-2023-36479",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36479 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-hazelcast."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-hazelcast@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6054c1b1-fd8e-5d5c-9ead-5127faa15d7a",
      "id": "CVE-2023-40167",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40167 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-hazelcast."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-hazelcast@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d255de74-5978-5590-a934-3de73d229919",
      "id": "CVE-2023-41900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-41900 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-hazelcast."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-hazelcast@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ea0ee75-e74e-5971-ba03-468265bf570b",
      "id": "CVE-2024-13009",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-13009 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-hazelcast."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-hazelcast@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0d1679b-2a7f-57a6-a11a-8d9c62a03780",
      "id": "CVE-2024-22201",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22201 is fixed in version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-hazelcast."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-hazelcast@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3578727-1737-57d7-beee-2eb30ece473c",
      "id": "CVE-2024-6762",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6762 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-hazelcast."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-hazelcast@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9124b22-7e71-590d-b6bf-727d54de2e6f",
      "id": "CVE-2024-6763",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6763 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-hazelcast."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-hazelcast@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8af5503-c929-54b9-8559-aa8796be7a54",
      "id": "CVE-2024-9823",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-9823 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-hazelcast."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-hazelcast@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e24e2a0-a561-51e9-928a-42835a519cd4",
      "id": "CVE-2025-11143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-11143 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-hazelcast."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-hazelcast@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c0d026f-879f-525f-bf1e-0958250ba5fb",
      "id": "CVE-2025-1948",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-1948 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-hazelcast."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-hazelcast@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8609dd5-7c10-5437-9451-d54607151887",
      "id": "CVE-2025-5115",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-5115 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-hazelcast."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-hazelcast@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:523a2838-c430-56cb-bbf1-2db253aff093",
      "id": "CVE-2026-1605",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-1605 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-hazelcast."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-hazelcast@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efe80c7a-28db-539a-9cba-ca721becb010",
      "id": "CVE-2026-5795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-5795 affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-hazelcast."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-hazelcast@9.4.53.v20231009-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa8173d4-6181-535e-8f06-d4ae34212aa2",
      "id": "GHSA-58qw-p7qm-5rvh",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 9.4.53.v20231009-tuxcare.1 of org.eclipse.jetty:jetty-hazelcast."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-hazelcast@9.4.53.v20231009-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-hazelcast@9.4.53.v20231009-tuxcare.1"
    }
  ]
}