{ "@id": "urn:uuid:c7e8d03d-6d90-40b9-98b2-afd1e228cbb6", "role": "Document Creator", "author": "https://tuxcare.com", "version": 12, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-29T01:02:19.900071+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T23:37:14.382670+00:00", "status_notes": "Vulnerability CVE-2011-4461 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2011-4461" }, "action_statement": "Vulnerability CVE-2011-4461 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T22:31:54.607962+00:00", "status_notes": "Vulnerability CVE-2015-2080 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2015-2080" }, "action_statement": "Vulnerability CVE-2015-2080 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T22:31:54.607962+00:00", "status_notes": "Vulnerability CVE-2017-7656 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2017-7656" }, "action_statement": "Vulnerability CVE-2017-7656 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T22:31:54.607962+00:00", "status_notes": "Vulnerability CVE-2017-7657 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2017-7657" }, "action_statement": "Vulnerability CVE-2017-7657 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T22:26:53.294923+00:00", "status_notes": "Vulnerability CVE-2017-7658 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2017-7658" }, "action_statement": "Vulnerability CVE-2017-7658 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T22:26:53.294923+00:00", "status_notes": "Vulnerability CVE-2017-9735 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2017-9735" }, "action_statement": "Vulnerability CVE-2017-9735 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T22:26:53.294923+00:00", "status_notes": "Vulnerability CVE-2018-12536 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2018-12536" }, "action_statement": "Vulnerability CVE-2018-12536 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-29T00:08:54.384014+00:00", "status_notes": "Vulnerability CVE-2018-12538 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2018-12538" }, "action_statement": "Vulnerability CVE-2018-12538 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-29T00:08:54.384014+00:00", "status_notes": "Vulnerability CVE-2018-12545 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2018-12545" }, "action_statement": "Vulnerability CVE-2018-12545 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T22:26:53.294923+00:00", "status_notes": "Vulnerability CVE-2019-10241 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2019-10241" }, "action_statement": "Vulnerability CVE-2019-10241 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T23:37:14.382670+00:00", "status_notes": "Vulnerability CVE-2019-10246 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2019-10246" }, "action_statement": "Vulnerability CVE-2019-10246 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T22:26:53.294923+00:00", "status_notes": "Vulnerability CVE-2019-10247 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2019-10247" }, "action_statement": "Vulnerability CVE-2019-10247 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T23:59:58.436178+00:00", "status_notes": "Vulnerability CVE-2019-17632 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2019-17632" }, "action_statement": "Vulnerability CVE-2019-17632 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-29T01:02:19.900071+00:00", "status_notes": "Vulnerability CVE-2019-17638 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2019-17638" }, "action_statement": "Vulnerability CVE-2019-17638 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2020-27216 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2020-27216" }, "action_statement": "Vulnerability CVE-2020-27216 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T23:59:58.436178+00:00", "status_notes": "Vulnerability CVE-2020-27218 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2020-27218" }, "action_statement": "Vulnerability CVE-2020-27218 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T23:59:58.436178+00:00", "status_notes": "Vulnerability CVE-2020-27223 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2020-27223" }, "action_statement": "Vulnerability CVE-2020-27223 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T23:49:59.024011+00:00", "status_notes": "Vulnerability CVE-2021-28163 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2021-28163" }, "action_statement": "Vulnerability CVE-2021-28163 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-29T01:02:19.900071+00:00", "status_notes": "Vulnerability CVE-2021-28164 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2021-28164" }, "action_statement": "Vulnerability CVE-2021-28164 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T22:26:53.294923+00:00", "status_notes": "Vulnerability CVE-2021-28165 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2021-28165" }, "action_statement": "Vulnerability CVE-2021-28165 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T23:37:14.382670+00:00", "status_notes": "Vulnerability CVE-2021-28169 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2021-28169" }, "action_statement": "Vulnerability CVE-2021-28169 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T22:26:53.294923+00:00", "status_notes": "Vulnerability CVE-2021-34428 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2021-34428" }, "action_statement": "Vulnerability CVE-2021-34428 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-29T01:02:19.900071+00:00", "status_notes": "Vulnerability CVE-2021-34429 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2021-34429" }, "action_statement": "Vulnerability CVE-2021-34429 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T22:26:53.294923+00:00", "status_notes": "Vulnerability CVE-2022-2047 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2022-2047" }, "action_statement": "Vulnerability CVE-2022-2047 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T23:49:59.024011+00:00", "status_notes": "Vulnerability CVE-2022-2048 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2022-2048" }, "action_statement": "Vulnerability CVE-2022-2048 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-29T00:22:41.069903+00:00", "status_notes": "Vulnerability CVE-2022-2191 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2022-2191" }, "action_statement": "Vulnerability CVE-2022-2191 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T22:26:53.294923+00:00", "status_notes": "Vulnerability CVE-2023-26048 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2023-26048" }, "action_statement": "Vulnerability CVE-2023-26048 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T22:26:53.294923+00:00", "status_notes": "Vulnerability CVE-2023-26049 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2023-26049" }, "action_statement": "Vulnerability CVE-2023-26049 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T23:49:59.024011+00:00", "status_notes": "Vulnerability CVE-2023-36478 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2023-36478" }, "action_statement": "Vulnerability CVE-2023-36478 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2023-36479 does not affect version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx. Version 11.0.30 is not affected by CVE-2023-36479: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed.", "vulnerability": { "name": "CVE-2023-36479" }, "impact_statement": "Version 11.0.30 is not affected by CVE-2023-36479: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T22:26:53.294923+00:00", "status_notes": "Vulnerability CVE-2023-40167 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2023-40167" }, "action_statement": "Vulnerability CVE-2023-40167 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T23:49:59.024011+00:00", "status_notes": "Vulnerability CVE-2023-41900 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2023-41900" }, "action_statement": "Vulnerability CVE-2023-41900 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T23:49:59.024011+00:00", "status_notes": "Vulnerability CVE-2023-44487 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2023-44487" }, "action_statement": "Vulnerability CVE-2023-44487 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T23:59:58.436178+00:00", "status_notes": "Vulnerability CVE-2024-13009 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2024-13009" }, "action_statement": "Vulnerability CVE-2024-13009 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-22201 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2024-22201" }, "action_statement": "Vulnerability CVE-2024-22201 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-6762 does not affect version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx. All 2 patch commits already exist in target branch", "vulnerability": { "name": "CVE-2024-6762" }, "impact_statement": "All 2 patch commits already exist in target branch" }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-6763 does not affect version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx. fix for CVE for this version has been already backported by the original developers, so this brunch is not vulnerable", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2024-6763" }, "impact_statement": "fix for CVE for this version has been already backported by the original developers, so this brunch is not vulnerable" }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-29T00:22:41.069903+00:00", "status_notes": "Vulnerability CVE-2024-7708 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2024-7708" }, "action_statement": "Vulnerability CVE-2024-7708 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-8184 does not affect version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx. Version 11.0.28 is not vulnerable. Summary: The target repository already has the security fix for CVE-2024-8184 applied. The code uses atomic compute() operations with reference counting and proper cleanup mechanisms to prevent memory exhaustion. [terminalized not_affected from patch_application_manual/not_vulnerable]", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2024-8184" }, "impact_statement": "Version 11.0.28 is not vulnerable. Summary: The target repository already has the security fix for CVE-2024-8184 applied. The code uses atomic compute() operations with reference counting and proper cleanup mechanisms to prevent memory exhaustion. [terminalized not_affected from patch_application_manual/not_vulnerable]" }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-28T23:59:58.436178+00:00", "status_notes": "Vulnerability CVE-2024-9823 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2024-9823" }, "action_statement": "Vulnerability CVE-2024-9823 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-11143 is fixed in version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2025-11143" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-5115 does not affect version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx. fix for CVE for this version has been already backported by the original developers, so this brunch is not vulnerable", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-5115" }, "impact_statement": "fix for CVE for this version has been already backported by the original developers, so this brunch is not vulnerable" }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10050 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2026-10050" }, "action_statement": "Vulnerability CVE-2026-10050 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-10051 does not affect version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx. Jetty 11.0.30 is outside the affected range (12.0.0\u201312.0.35 and 12.1.0\u201312.1.9). CVE-2026-10051 affects the Jetty 12 lifecycle where connection-scoped trailer state can survive parser reuse. This code path is absent in Jetty 11.0.30, where the HTTP channel clears its trailer state during request recycle before the parser is reused. Therefore, trailer state cannot leak between requests in this version.", "vulnerability": { "name": "CVE-2026-10051" }, "impact_statement": "Jetty 11.0.30 is outside the affected range (12.0.0\u201312.0.35 and 12.1.0\u201312.1.9). CVE-2026-10051 affects the Jetty 12 lifecycle where connection-scoped trailer state can survive parser reuse. This code path is absent in Jetty 11.0.30, where the HTTP channel clears its trailer state during request recycle before the parser is reused. Therefore, trailer state cannot leak between requests in this version." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-1605 does not affect version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx. Version 11.0.28 is not vulnerable. Summary: Target repository is NOT vulnerable to CVE-2026-1605. The vulnerability affects Jetty 12.x (versions 12.0.0-12.0.31 and 12.1.0-12.0.5), while the target is running Jetty 11.0.28.tuxcare0001, which uses a different architecture for request decompression that does not exhibit this vulnerability. [terminalized not_affected from patch_application_manual/not_vulnerable]", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-1605" }, "impact_statement": "Version 11.0.28 is not vulnerable. Summary: Target repository is NOT vulnerable to CVE-2026-1605. The vulnerability affects Jetty 12.x (versions 12.0.0-12.0.31 and 12.1.0-12.0.5), while the target is running Jetty 11.0.28.tuxcare0001, which uses a different architecture for request decompression that does not exhibit this vulnerability. [terminalized not_affected from patch_application_manual/not_vulnerable]" }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-15T10:03:50.009610+00:00", "status_notes": "Vulnerability CVE-2026-18659 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2026-18659" }, "action_statement": "Vulnerability CVE-2026-18659 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-15T09:43:02.853292+00:00", "status_notes": "Vulnerability CVE-2026-18660 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2026-18660" }, "action_statement": "Vulnerability CVE-2026-18660 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-15T09:43:02.853292+00:00", "status_notes": "Vulnerability CVE-2026-18661 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2026-18661" }, "action_statement": "Vulnerability CVE-2026-18661 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-15T10:03:50.009610+00:00", "status_notes": "Vulnerability CVE-2026-18662 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2026-18662" }, "action_statement": "Vulnerability CVE-2026-18662 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-10-15T10:03:50.009610+00:00", "status_notes": "Vulnerability CVE-2026-19864 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2026-19864" }, "action_statement": "Vulnerability CVE-2026-19864 affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-2332 is fixed in version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2026-2332" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-5795 is fixed in version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2026-5795" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-6790 is fixed in version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "CVE-2026-6790" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-8384 does not affect version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx. not_affected \u2014 Jetty 11.0.30.tuxcare0002 is not affected by CVE-2026-8384. The vulnerability exists in Jetty 12's unified canonicalPath() method where slash state tracking gets corrupted when processing semicolon path parameters. Jetty 11 uses a different two-stage architecture that separates semicolon stripping (decodePath) from dot normalization (canonicalPath), preventing the vulnerable pattern from manife...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-8384" }, "impact_statement": "not_affected \u2014 Jetty 11.0.30.tuxcare0002 is not affected by CVE-2026-8384. The vulnerability exists in Jetty 12's unified canonicalPath() method where slash state tracking gets corrupted when processing semicolon path parameters. Jetty 11 uses a different two-stage architecture that separates semicolon stripping (decodePath) from dot normalization (canonicalPath), preventing the vulnerable pattern from manife..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001", "identifiers": { "purl": "pkg:maven/org.eclipse.jetty/jetty-jmx@11.0.30.tuxcare0001" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx.", "vulnerability": { "name": "GHSA-58qw-p7qm-5rvh" }, "action_statement": "Vulnerability GHSA-58qw-p7qm-5rvh affects version 11.0.30.tuxcare0001 of org.eclipse.jetty:jetty-jmx." } ] }