{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f97ffaf9-9311-5c11-879f-ec36d5e39dd7",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.48.v20220622-tuxcare.1",
      "type": "library",
      "group": "org.eclipse.jetty.websocket",
      "name": "javax-websocket-client-impl",
      "version": "9.4.48.v20220622-tuxcare.1",
      "purl": "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.48.v20220622-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:1636c9fd-46b6-5464-af28-c17e7ccc63e4",
      "id": "CVE-2020-27216",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27216 affects version 9.4.48.v20220622-tuxcare.1 of org.eclipse.jetty.websocket:javax-websocket-client-impl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.48.v20220622-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e0be1f9-9a27-5903-b89c-c570731b8ffd",
      "id": "CVE-2021-28169",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-28169 affects version 9.4.48.v20220622-tuxcare.1 of org.eclipse.jetty.websocket:javax-websocket-client-impl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.48.v20220622-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fcfe4337-0598-58f6-839f-b5cdfc66e3fe",
      "id": "CVE-2021-34428",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-34428 affects version 9.4.48.v20220622-tuxcare.1 of org.eclipse.jetty.websocket:javax-websocket-client-impl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.48.v20220622-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:290836d7-6949-5a70-a4c0-aa29a7e2b0c5",
      "id": "CVE-2023-26048",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-26048 is fixed in version 9.4.48.v20220622-tuxcare.1 of org.eclipse.jetty.websocket:javax-websocket-client-impl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.48.v20220622-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:200654dd-e59f-5758-8d2f-669d98075a90",
      "id": "CVE-2023-26049",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-26049 affects version 9.4.48.v20220622-tuxcare.1 of org.eclipse.jetty.websocket:javax-websocket-client-impl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.48.v20220622-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:400606c9-1f9f-53c5-83b8-a0b6a834db3f",
      "id": "CVE-2023-36478",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36478 affects version 9.4.48.v20220622-tuxcare.1 of org.eclipse.jetty.websocket:javax-websocket-client-impl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.48.v20220622-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fa9d8c9-f177-562e-b231-927bbbd2a6fc",
      "id": "CVE-2023-36479",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-36479 affects version 9.4.48.v20220622-tuxcare.1 of org.eclipse.jetty.websocket:javax-websocket-client-impl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.48.v20220622-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c93eab9a-c2f3-5156-afd7-952773bd96c1",
      "id": "CVE-2023-40167",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-40167 is fixed in version 9.4.48.v20220622-tuxcare.1 of org.eclipse.jetty.websocket:javax-websocket-client-impl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.48.v20220622-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:963a5e76-7f78-5454-a66a-fc7e6d67f3bc",
      "id": "CVE-2023-41900",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-41900 affects version 9.4.48.v20220622-tuxcare.1 of org.eclipse.jetty.websocket:javax-websocket-client-impl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.48.v20220622-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7937402b-a8f7-50b2-a9c3-7f2f18df91eb",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 9.4.48.v20220622-tuxcare.1 of org.eclipse.jetty.websocket:javax-websocket-client-impl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.48.v20220622-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da4460b1-a763-5d11-954b-c084ebc59da1",
      "id": "CVE-2024-13009",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-13009 is fixed in version 9.4.48.v20220622-tuxcare.1 of org.eclipse.jetty.websocket:javax-websocket-client-impl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.48.v20220622-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a60ccd5-73db-5381-8b31-f2624e34a4ca",
      "id": "CVE-2024-22201",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22201 is fixed in version 9.4.48.v20220622-tuxcare.1 of org.eclipse.jetty.websocket:javax-websocket-client-impl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.48.v20220622-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6185764a-511e-5260-8736-0c5cda794977",
      "id": "CVE-2024-6762",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-6762 is fixed in version 9.4.48.v20220622-tuxcare.1 of org.eclipse.jetty.websocket:javax-websocket-client-impl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.48.v20220622-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dcf6d344-332d-550c-bce9-12c3944b1c2a",
      "id": "CVE-2024-6763",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6763 affects version 9.4.48.v20220622-tuxcare.1 of org.eclipse.jetty.websocket:javax-websocket-client-impl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.48.v20220622-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46924f78-a17f-57c2-befe-dae077c7e50e",
      "id": "CVE-2024-8184",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-8184 affects version 9.4.48.v20220622-tuxcare.1 of org.eclipse.jetty.websocket:javax-websocket-client-impl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.48.v20220622-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c37ca27-27d6-582e-add2-f7988dff72a7",
      "id": "CVE-2024-9823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-9823 is fixed in version 9.4.48.v20220622-tuxcare.1 of org.eclipse.jetty.websocket:javax-websocket-client-impl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.48.v20220622-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a01cfa7-6b03-5ca9-b1f4-6c6d3d72499d",
      "id": "CVE-2025-11143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-11143 affects version 9.4.48.v20220622-tuxcare.1 of org.eclipse.jetty.websocket:javax-websocket-client-impl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.48.v20220622-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6dfd1641-2e4d-59da-8346-3f89c318fc0b",
      "id": "CVE-2025-5115",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-5115 affects version 9.4.48.v20220622-tuxcare.1 of org.eclipse.jetty.websocket:javax-websocket-client-impl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.48.v20220622-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:990a921e-d749-55dd-b319-d9a3d5b76542",
      "id": "CVE-2026-1605",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-1605 affects version 9.4.48.v20220622-tuxcare.1 of org.eclipse.jetty.websocket:javax-websocket-client-impl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.48.v20220622-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46e5857c-1391-59ca-b74b-af09e938c067",
      "id": "CVE-2026-2332",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-2332 affects version 9.4.48.v20220622-tuxcare.1 of org.eclipse.jetty.websocket:javax-websocket-client-impl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.48.v20220622-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35408fd0-91f4-54cc-a14c-c3fb3fdee2cb",
      "id": "GHSA-58qw-p7qm-5rvh",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 9.4.48.v20220622-tuxcare.1 of org.eclipse.jetty.websocket:javax-websocket-client-impl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.48.v20220622-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.eclipse.jetty.websocket/javax-websocket-client-impl@9.4.48.v20220622-tuxcare.1"
    }
  ]
}