{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f2afbf67-0b71-5cf1-a631-76eaa55e8081",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-unixsocket-common@10.0.26-tuxcare.2",
      "type": "library",
      "group": "org.eclipse.jetty",
      "name": "jetty-unixsocket-common",
      "version": "10.0.26-tuxcare.2",
      "purl": "pkg:maven/org.eclipse.jetty/jetty-unixsocket-common@10.0.26-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:efed4709-24f7-5c85-8515-752d18c70c3a",
      "id": "CVE-2020-25711",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-25711 affects version 10.0.26-tuxcare.2 of org.eclipse.jetty:jetty-unixsocket-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-unixsocket-common@10.0.26-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4377081-a569-5e3c-be0c-9cad1bfea28f",
      "id": "CVE-2020-27216",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27216 affects version 10.0.26-tuxcare.2 of org.eclipse.jetty:jetty-unixsocket-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-unixsocket-common@10.0.26-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64023910-c951-5d79-942d-9ca4e7029928",
      "id": "CVE-2021-28169",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28169 affects version 10.0.26-tuxcare.2 of org.eclipse.jetty:jetty-unixsocket-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-unixsocket-common@10.0.26-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:826de3d5-49ac-50db-b7a3-942ea88f7eb4",
      "id": "CVE-2021-34428",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-34428 affects version 10.0.26-tuxcare.2 of org.eclipse.jetty:jetty-unixsocket-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-unixsocket-common@10.0.26-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c183a4c-254f-559f-a1de-07b2370d7dd4",
      "id": "CVE-2023-36478",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36478 affects version 10.0.26-tuxcare.2 of org.eclipse.jetty:jetty-unixsocket-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-unixsocket-common@10.0.26-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:300ac55e-da4c-5b6a-83ee-8bd259145541",
      "id": "CVE-2023-36479",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36479 affects version 10.0.26-tuxcare.2 of org.eclipse.jetty:jetty-unixsocket-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-unixsocket-common@10.0.26-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:231041a2-9a13-502a-81c5-ac4cf49d8752",
      "id": "CVE-2023-40167",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40167 affects version 10.0.26-tuxcare.2 of org.eclipse.jetty:jetty-unixsocket-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-unixsocket-common@10.0.26-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9b0d896-9617-5bca-bf65-e521887b0a9e",
      "id": "CVE-2023-41900",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2023-41900 does not affect version 10.0.26-tuxcare.2 of org.eclipse.jetty:jetty-unixsocket-common. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-unixsocket-common@10.0.26-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0259e1d-0e5c-5257-9607-681a80779011",
      "id": "CVE-2024-22201",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22201 affects version 10.0.26-tuxcare.2 of org.eclipse.jetty:jetty-unixsocket-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-unixsocket-common@10.0.26-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8888decf-5935-5a51-9eb7-cc945b49ed2b",
      "id": "CVE-2024-6762",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6762 affects version 10.0.26-tuxcare.2 of org.eclipse.jetty:jetty-unixsocket-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-unixsocket-common@10.0.26-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e5642b9-d2c3-546f-976f-7751b56d89ea",
      "id": "CVE-2024-6763",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6763 affects version 10.0.26-tuxcare.2 of org.eclipse.jetty:jetty-unixsocket-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-unixsocket-common@10.0.26-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75dd5e7b-79f3-5b80-ac59-b1fd3b14c15e",
      "id": "CVE-2024-8184",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-8184 affects version 10.0.26-tuxcare.2 of org.eclipse.jetty:jetty-unixsocket-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-unixsocket-common@10.0.26-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8932a4c3-ade1-50e0-a71d-6057f2457c92",
      "id": "CVE-2025-11143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-11143 affects version 10.0.26-tuxcare.2 of org.eclipse.jetty:jetty-unixsocket-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-unixsocket-common@10.0.26-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9597e653-c94b-5366-bbd4-a8c821ccaa85",
      "id": "CVE-2025-5115",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-5115 affects version 10.0.26-tuxcare.2 of org.eclipse.jetty:jetty-unixsocket-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-unixsocket-common@10.0.26-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8e87570-1509-5f67-a5d8-26b6a9d9aff0",
      "id": "CVE-2026-10050",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-10050 affects version 10.0.26-tuxcare.2 of org.eclipse.jetty:jetty-unixsocket-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-unixsocket-common@10.0.26-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c8ee92a-9973-5e38-83d3-be86397e2144",
      "id": "CVE-2026-10051",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-10051 affects version 10.0.26-tuxcare.2 of org.eclipse.jetty:jetty-unixsocket-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-unixsocket-common@10.0.26-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1fff1a72-05bc-526e-93a3-d1f8489dc430",
      "id": "CVE-2026-1605",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-1605 affects version 10.0.26-tuxcare.2 of org.eclipse.jetty:jetty-unixsocket-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-unixsocket-common@10.0.26-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfa186e5-a3df-5b4e-b10d-4f119fcf3532",
      "id": "CVE-2026-2332",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-2332 affects version 10.0.26-tuxcare.2 of org.eclipse.jetty:jetty-unixsocket-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-unixsocket-common@10.0.26-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ffebf3d-d9d8-5d97-a3fa-f8def9312aaf",
      "id": "CVE-2026-5795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-5795 is fixed in version 10.0.26-tuxcare.2 of org.eclipse.jetty:jetty-unixsocket-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-unixsocket-common@10.0.26-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0c017a1-2a92-5e2f-8c47-98ed696cee90",
      "id": "CVE-2026-6790",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-6790 affects version 10.0.26-tuxcare.2 of org.eclipse.jetty:jetty-unixsocket-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-unixsocket-common@10.0.26-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a95a360d-66b2-56fd-acc0-c857cc4eaec6",
      "id": "CVE-2026-8384",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-8384 does not affect version 10.0.26-tuxcare.2 of org.eclipse.jetty:jetty-unixsocket-common. not_affected \u2014 Jetty 10.0.26-tuxcare.1 is NOT affected by CVE-2026-8384. The vulnerability requires Jetty 12's specific architecture where encoded path processing and dot-segment normalization occur in a single method with slash-state tracking. Jetty 10 uses a two-step architecture (decodePath then canonicalPath) without slash-state tracking, preventing the vulnerability chain from forming."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-unixsocket-common@10.0.26-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:288cfaa6-89b9-5d6e-8c1d-223ea4ec772f",
      "id": "GHSA-58qw-p7qm-5rvh",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 10.0.26-tuxcare.2 of org.eclipse.jetty:jetty-unixsocket-common."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty/jetty-unixsocket-common@10.0.26-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-unixsocket-common@10.0.26-tuxcare.2"
    }
  ]
}