{ "@id": "urn:uuid:27b6358c-f543-4fa7-a4d9-0f5ddea3992c", "role": "Document Creator", "author": "https://tuxcare.com", "version": 14, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-29T01:02:19.900071+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T23:41:42.084809+00:00", "status_notes": "Vulnerability CVE-2011-4461 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2011-4461" }, "action_statement": "Vulnerability CVE-2011-4461 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T22:31:54.607962+00:00", "status_notes": "Vulnerability CVE-2015-2080 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2015-2080" }, "action_statement": "Vulnerability CVE-2015-2080 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T22:31:54.607962+00:00", "status_notes": "Vulnerability CVE-2017-7656 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2017-7656" }, "action_statement": "Vulnerability CVE-2017-7656 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T22:31:54.607962+00:00", "status_notes": "Vulnerability CVE-2017-7657 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2017-7657" }, "action_statement": "Vulnerability CVE-2017-7657 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T22:26:53.294923+00:00", "status_notes": "Vulnerability CVE-2017-7658 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2017-7658" }, "action_statement": "Vulnerability CVE-2017-7658 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T22:31:54.607962+00:00", "status_notes": "Vulnerability CVE-2017-9735 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2017-9735" }, "action_statement": "Vulnerability CVE-2017-9735 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T22:31:54.607962+00:00", "status_notes": "Vulnerability CVE-2018-12536 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2018-12536" }, "action_statement": "Vulnerability CVE-2018-12536 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-29T00:08:54.384014+00:00", "status_notes": "Vulnerability CVE-2018-12538 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2018-12538" }, "action_statement": "Vulnerability CVE-2018-12538 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-29T00:08:54.384014+00:00", "status_notes": "Vulnerability CVE-2018-12545 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2018-12545" }, "action_statement": "Vulnerability CVE-2018-12545 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T22:26:53.294923+00:00", "status_notes": "Vulnerability CVE-2019-10241 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2019-10241" }, "action_statement": "Vulnerability CVE-2019-10241 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T23:37:14.382670+00:00", "status_notes": "Vulnerability CVE-2019-10246 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2019-10246" }, "action_statement": "Vulnerability CVE-2019-10246 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T22:26:53.294923+00:00", "status_notes": "Vulnerability CVE-2019-10247 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2019-10247" }, "action_statement": "Vulnerability CVE-2019-10247 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T23:59:58.436178+00:00", "status_notes": "Vulnerability CVE-2019-17632 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2019-17632" }, "action_statement": "Vulnerability CVE-2019-17632 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-29T01:02:19.900071+00:00", "status_notes": "Vulnerability CVE-2019-17638 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2019-17638" }, "action_statement": "Vulnerability CVE-2019-17638 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2020-27216 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2020-27216" }, "action_statement": "Vulnerability CVE-2020-27216 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T23:59:58.436178+00:00", "status_notes": "Vulnerability CVE-2020-27218 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2020-27218" }, "action_statement": "Vulnerability CVE-2020-27218 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T23:59:58.436178+00:00", "status_notes": "Vulnerability CVE-2020-27223 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2020-27223" }, "action_statement": "Vulnerability CVE-2020-27223 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T23:49:59.024011+00:00", "status_notes": "Vulnerability CVE-2021-28163 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2021-28163" }, "action_statement": "Vulnerability CVE-2021-28163 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-29T01:02:19.900071+00:00", "status_notes": "Vulnerability CVE-2021-28164 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2021-28164" }, "action_statement": "Vulnerability CVE-2021-28164 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T22:26:53.294923+00:00", "status_notes": "Vulnerability CVE-2021-28165 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2021-28165" }, "action_statement": "Vulnerability CVE-2021-28165 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T23:37:14.382670+00:00", "status_notes": "Vulnerability CVE-2021-28169 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2021-28169" }, "action_statement": "Vulnerability CVE-2021-28169 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T22:26:53.294923+00:00", "status_notes": "Vulnerability CVE-2021-34428 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2021-34428" }, "action_statement": "Vulnerability CVE-2021-34428 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-29T01:02:19.900071+00:00", "status_notes": "Vulnerability CVE-2021-34429 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2021-34429" }, "action_statement": "Vulnerability CVE-2021-34429 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T22:26:53.294923+00:00", "status_notes": "Vulnerability CVE-2022-2047 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2022-2047" }, "action_statement": "Vulnerability CVE-2022-2047 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T23:49:59.024011+00:00", "status_notes": "Vulnerability CVE-2022-2048 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2022-2048" }, "action_statement": "Vulnerability CVE-2022-2048 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-29T00:22:41.069903+00:00", "status_notes": "Vulnerability CVE-2022-2191 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2022-2191" }, "action_statement": "Vulnerability CVE-2022-2191 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T22:26:53.294923+00:00", "status_notes": "Vulnerability CVE-2023-26048 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2023-26048" }, "action_statement": "Vulnerability CVE-2023-26048 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T22:26:53.294923+00:00", "status_notes": "Vulnerability CVE-2023-26049 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2023-26049" }, "action_statement": "Vulnerability CVE-2023-26049 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T23:49:59.024011+00:00", "status_notes": "Vulnerability CVE-2023-36478 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2023-36478" }, "action_statement": "Vulnerability CVE-2023-36478 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2023-36479 does not affect version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp. Version 11.0.28 is not affected by CVE-2023-36479: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed.", "vulnerability": { "name": "CVE-2023-36479" }, "impact_statement": "Version 11.0.28 is not affected by CVE-2023-36479: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T22:26:53.294923+00:00", "status_notes": "Vulnerability CVE-2023-40167 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2023-40167" }, "action_statement": "Vulnerability CVE-2023-40167 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T23:49:59.024011+00:00", "status_notes": "Vulnerability CVE-2023-41900 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2023-41900" }, "action_statement": "Vulnerability CVE-2023-41900 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T23:49:59.024011+00:00", "status_notes": "Vulnerability CVE-2023-44487 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2023-44487" }, "action_statement": "Vulnerability CVE-2023-44487 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T23:59:58.436178+00:00", "status_notes": "Vulnerability CVE-2024-13009 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2024-13009" }, "action_statement": "Vulnerability CVE-2024-13009 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-22201 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2024-22201" }, "action_statement": "Vulnerability CVE-2024-22201 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-6762 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2024-6762" }, "action_statement": "Vulnerability CVE-2024-6762 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-6763 does not affect version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp. fix for CVE for this version has been already backported by the original developers, so this brunch is not vulnerable", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2024-6763" }, "impact_statement": "fix for CVE for this version has been already backported by the original developers, so this brunch is not vulnerable" }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-29T00:22:41.069903+00:00", "status_notes": "Vulnerability CVE-2024-7708 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2024-7708" }, "action_statement": "Vulnerability CVE-2024-7708 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-8184 does not affect version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp. Version 11.0.28 is not vulnerable. Summary: The target repository already has the security fix for CVE-2024-8184 applied. The code uses atomic compute() operations with reference counting and proper cleanup mechanisms to prevent memory exhaustion. [terminalized not_affected from patch_application_manual/not_vulnerable]", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2024-8184" }, "impact_statement": "Version 11.0.28 is not vulnerable. Summary: The target repository already has the security fix for CVE-2024-8184 applied. The code uses atomic compute() operations with reference counting and proper cleanup mechanisms to prevent memory exhaustion. [terminalized not_affected from patch_application_manual/not_vulnerable]" }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T23:59:58.436178+00:00", "status_notes": "Vulnerability CVE-2024-9823 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2024-9823" }, "action_statement": "Vulnerability CVE-2024-9823 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-11143 is fixed in version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2025-11143" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-5115 does not affect version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp. fix for CVE for this version has been already backported by the original developers, so this brunch is not vulnerable", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-5115" }, "impact_statement": "fix for CVE for this version has been already backported by the original developers, so this brunch is not vulnerable" }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-28T00:32:09.388572+00:00", "status_notes": "Vulnerability CVE-2026-10050 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp, and is fixed in 11.0.28.tuxcare0005.", "vulnerability": { "name": "CVE-2026-10050" }, "action_statement": "Vulnerability CVE-2026-10050 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp, and is fixed in 11.0.28.tuxcare0005." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10051 does not affect version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp. not_affected \u2014 Jetty 11.0.28 is not affected by CVE-2026-10051. The vulnerability describes trailer leakage in Jetty 12.x's redesigned internal.HttpConnection where the _trailers field was never cleared between requests. Jetty 11.0.28 has a fundamentally different architecture where _trailers exists in HttpChannelOverHttp and is properly cleared via the established recycle() mechanism between HTTP/1.1 keep-al...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-10051" }, "impact_statement": "not_affected \u2014 Jetty 11.0.28 is not affected by CVE-2026-10051. The vulnerability describes trailer leakage in Jetty 12.x's redesigned internal.HttpConnection where the _trailers field was never cleared between requests. Jetty 11.0.28 has a fundamentally different architecture where _trailers exists in HttpChannelOverHttp and is properly cleared via the established recycle() mechanism between HTTP/1.1 keep-al..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-1605 does not affect version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp. Version 11.0.28 is not vulnerable. Summary: Target repository is NOT vulnerable to CVE-2026-1605. The vulnerability affects Jetty 12.x (versions 12.0.0-12.0.31 and 12.1.0-12.0.5), while the target is running Jetty 11.0.28.tuxcare0001, which uses a different architecture for request decompression that does not exhibit this vulnerability. [terminalized not_affected from patch_application_manual/not_vulnerable]", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-1605" }, "impact_statement": "Version 11.0.28 is not vulnerable. Summary: Target repository is NOT vulnerable to CVE-2026-1605. The vulnerability affects Jetty 12.x (versions 12.0.0-12.0.31 and 12.1.0-12.0.5), while the target is running Jetty 11.0.28.tuxcare0001, which uses a different architecture for request decompression that does not exhibit this vulnerability. [terminalized not_affected from patch_application_manual/not_vulnerable]" }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-15T09:59:09.094507+00:00", "status_notes": "Vulnerability CVE-2026-18659 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2026-18659" }, "action_statement": "Vulnerability CVE-2026-18659 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-15T09:43:02.853292+00:00", "status_notes": "Vulnerability CVE-2026-18660 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2026-18660" }, "action_statement": "Vulnerability CVE-2026-18660 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-15T09:43:02.853292+00:00", "status_notes": "Vulnerability CVE-2026-18661 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2026-18661" }, "action_statement": "Vulnerability CVE-2026-18661 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-15T09:59:09.094507+00:00", "status_notes": "Vulnerability CVE-2026-18662 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2026-18662" }, "action_statement": "Vulnerability CVE-2026-18662 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-10-15T09:59:09.094507+00:00", "status_notes": "Vulnerability CVE-2026-19864 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2026-19864" }, "action_statement": "Vulnerability CVE-2026-19864 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-2332 is fixed in version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2026-2332" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-5795 is fixed in version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "CVE-2026-5795" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-6790 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp, and is fixed in 11.0.28.tuxcare0004.", "vulnerability": { "name": "CVE-2026-6790" }, "action_statement": "Vulnerability CVE-2026-6790 affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp, and is fixed in 11.0.28.tuxcare0004." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-8384 does not affect version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp. not_affected \u2014 Jetty 11.0.28 is not affected by CVE-2026-8384. While the target contains similar semicolon-handling code in decodePath() that doesn't update the character tracking variable, the vulnerability does not manifest due to architectural differences. Jetty 11 uses a two-stage normalization process (decodePath then canonicalPath) where the path is always fully normalized before security checks, unlike...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-8384" }, "impact_statement": "not_affected \u2014 Jetty 11.0.28 is not affected by CVE-2026-8384. While the target contains similar semicolon-handling code in decodePath() that doesn't update the character tracking variable, the vulnerability does not manifest due to architectural differences. Jetty 11 uses a two-stage normalization process (decodePath then canonicalPath) where the path is always fully normalized before security checks, unlike..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty.osgi/jetty-osgi-boot-jsp@11.0.28.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp.", "vulnerability": { "name": "GHSA-58qw-p7qm-5rvh" }, "action_statement": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 11.0.28.tuxcare0001 of org.eclipse.jetty.osgi:jetty-osgi-boot-jsp." } ] }