{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7f74e216-2373-51ef-95fa-31467626f99d",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-jaspi@9.4.53.v20231009-tuxcare.3",
      "type": "library",
      "group": "org.eclipse.jetty",
      "name": "jetty-jaspi",
      "version": "9.4.53.v20231009-tuxcare.3",
      "purl": "pkg:maven/org.eclipse.jetty/jetty-jaspi@9.4.53.v20231009-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:c9822ee4-e5c8-5955-a83b-09ec39418aa6",
      "id": "CVE-2020-25711",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-25711 affects version 9.4.53.v20231009-tuxcare.3 of org.eclipse.jetty:jetty-jaspi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-jaspi@9.4.53.v20231009-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4365691-32b8-53e8-bd65-777e351e7854",
      "id": "CVE-2020-27216",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27216 affects version 9.4.53.v20231009-tuxcare.3 of org.eclipse.jetty:jetty-jaspi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-jaspi@9.4.53.v20231009-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74cb2a6b-2e5c-5296-b584-f51bf4f2521a",
      "id": "CVE-2021-28169",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28169 affects version 9.4.53.v20231009-tuxcare.3 of org.eclipse.jetty:jetty-jaspi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-jaspi@9.4.53.v20231009-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9fce55c5-e69e-5c63-bc50-41cf36ae6503",
      "id": "CVE-2021-34428",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-34428 affects version 9.4.53.v20231009-tuxcare.3 of org.eclipse.jetty:jetty-jaspi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-jaspi@9.4.53.v20231009-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fc1924e-8509-5917-ab83-5f078502528f",
      "id": "CVE-2023-36478",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36478 affects version 9.4.53.v20231009-tuxcare.3 of org.eclipse.jetty:jetty-jaspi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-jaspi@9.4.53.v20231009-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:365d0262-239e-523d-bb47-d3ed8a0c82c3",
      "id": "CVE-2023-36479",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36479 affects version 9.4.53.v20231009-tuxcare.3 of org.eclipse.jetty:jetty-jaspi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-jaspi@9.4.53.v20231009-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41e0c875-79f3-5183-a81f-5c29e83918d1",
      "id": "CVE-2023-40167",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40167 affects version 9.4.53.v20231009-tuxcare.3 of org.eclipse.jetty:jetty-jaspi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-jaspi@9.4.53.v20231009-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4eb4cef-cf4c-5b04-92d2-4d9e6441b672",
      "id": "CVE-2023-41900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-41900 affects version 9.4.53.v20231009-tuxcare.3 of org.eclipse.jetty:jetty-jaspi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-jaspi@9.4.53.v20231009-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0358ae1a-d5dc-516a-ba19-b28b8a72b973",
      "id": "CVE-2024-13009",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-13009 is fixed in version 9.4.53.v20231009-tuxcare.3 of org.eclipse.jetty:jetty-jaspi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-jaspi@9.4.53.v20231009-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb167ecf-af82-5503-b874-b7f0d7f44418",
      "id": "CVE-2024-22201",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22201 is fixed in version 9.4.53.v20231009-tuxcare.3 of org.eclipse.jetty:jetty-jaspi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-jaspi@9.4.53.v20231009-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8d57130-34df-507d-9370-579bd4926074",
      "id": "CVE-2024-6762",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-6762 is fixed in version 9.4.53.v20231009-tuxcare.3 of org.eclipse.jetty:jetty-jaspi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-jaspi@9.4.53.v20231009-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd0a7163-5e37-5a9e-8423-a7bcbc2bee79",
      "id": "CVE-2024-6763",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-6763 is fixed in version 9.4.53.v20231009-tuxcare.3 of org.eclipse.jetty:jetty-jaspi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-jaspi@9.4.53.v20231009-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:603ab36d-050f-5899-bf9d-e90ace66202e",
      "id": "CVE-2024-9823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-9823 is fixed in version 9.4.53.v20231009-tuxcare.3 of org.eclipse.jetty:jetty-jaspi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-jaspi@9.4.53.v20231009-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:556dbe67-0843-58dd-98ba-19b7a6f0c9bd",
      "id": "CVE-2025-11143",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-11143 is fixed in version 9.4.53.v20231009-tuxcare.3 of org.eclipse.jetty:jetty-jaspi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-jaspi@9.4.53.v20231009-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b99ada43-0443-5ff0-bbb5-69ea2de09e11",
      "id": "CVE-2025-1948",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-1948 affects version 9.4.53.v20231009-tuxcare.3 of org.eclipse.jetty:jetty-jaspi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-jaspi@9.4.53.v20231009-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:adcb6b8d-3ef7-5ac4-9a05-cb620eaedc51",
      "id": "CVE-2025-5115",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-5115 affects version 9.4.53.v20231009-tuxcare.3 of org.eclipse.jetty:jetty-jaspi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-jaspi@9.4.53.v20231009-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05726e97-cb4c-5e66-9ff0-185f91e9bfcd",
      "id": "CVE-2026-1605",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-1605 affects version 9.4.53.v20231009-tuxcare.3 of org.eclipse.jetty:jetty-jaspi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-jaspi@9.4.53.v20231009-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f483adb-d5e5-5543-8687-15309145c1d8",
      "id": "CVE-2026-5795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-5795 affects version 9.4.53.v20231009-tuxcare.3 of org.eclipse.jetty:jetty-jaspi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-jaspi@9.4.53.v20231009-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d651926-7e79-5f02-b0a4-63ed98c1812f",
      "id": "GHSA-58qw-p7qm-5rvh",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 9.4.53.v20231009-tuxcare.3 of org.eclipse.jetty:jetty-jaspi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-jaspi@9.4.53.v20231009-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-jaspi@9.4.53.v20231009-tuxcare.3"
    }
  ]
}