{
  "@id": "urn:uuid:a7265314-d475-4f87-b17e-3c5db73f5c6c",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 4,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-10T16:29:48.390816+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.eclipse.jetty/jetty-deploy@11.0.34.tuxcare0001",
          "identifiers": {
            "purl": "pkg:maven/org.eclipse.jetty/jetty-deploy@11.0.34.tuxcare0001"
          }
        }
      ],
      "timestamp": "2026-11-02T17:57:18.601192+00:00",
      "status_notes": "Vulnerability CVE-2021-28163 does not affect version 11.0.34.tuxcare0001 of org.eclipse.jetty:jetty-deploy. not_affected \u2014 The target repository (Jetty 11.0.34) is not affected by CVE-2021-28163. The vulnerability pattern is not present because the upstream Jetty project fixed this issue in March 2021 (commits 37fffb17226 and ebe8311333d), and these fixes were already included in the upstream release before TuxCare onboarded version 11.0.26. The current code uses Files.isSameFile() to properly handle symlinked dire...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2021-28163"
      },
      "impact_statement": "not_affected \u2014 The target repository (Jetty 11.0.34) is not affected by CVE-2021-28163. The vulnerability pattern is not present because the upstream Jetty project fixed this issue in March 2021 (commits 37fffb17226 and ebe8311333d), and these fixes were already included in the upstream release before TuxCare onboarded version 11.0.26. The current code uses Files.isSameFile() to properly handle symlinked dire..."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.eclipse.jetty/jetty-deploy@11.0.34.tuxcare0001",
          "identifiers": {
            "purl": "pkg:maven/org.eclipse.jetty/jetty-deploy@11.0.34.tuxcare0001"
          }
        }
      ],
      "timestamp": "2026-10-30T19:04:41.632189+00:00",
      "status_notes": "Vulnerability CVE-2026-12611 is fixed in version 11.0.34.tuxcare0001 of org.eclipse.jetty:jetty-deploy.",
      "vulnerability": {
        "name": "CVE-2026-12611"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.eclipse.jetty/jetty-deploy@11.0.34.tuxcare0001",
          "identifiers": {
            "purl": "pkg:maven/org.eclipse.jetty/jetty-deploy@11.0.34.tuxcare0001"
          }
        }
      ],
      "timestamp": "2026-10-30T19:04:41.632189+00:00",
      "status_notes": "Vulnerability CVE-2026-19203 is fixed in version 11.0.34.tuxcare0001 of org.eclipse.jetty:jetty-deploy.",
      "vulnerability": {
        "name": "CVE-2026-19203"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.eclipse.jetty/jetty-deploy@11.0.34.tuxcare0001",
          "identifiers": {
            "purl": "pkg:maven/org.eclipse.jetty/jetty-deploy@11.0.34.tuxcare0001"
          }
        }
      ],
      "timestamp": "2026-10-30T19:04:41.632189+00:00",
      "status_notes": "Vulnerability CVE-2026-19204 is fixed in version 11.0.34.tuxcare0001 of org.eclipse.jetty:jetty-deploy.",
      "vulnerability": {
        "name": "CVE-2026-19204"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.eclipse.jetty/jetty-deploy@11.0.34.tuxcare0001",
          "identifiers": {
            "purl": "pkg:maven/org.eclipse.jetty/jetty-deploy@11.0.34.tuxcare0001"
          }
        }
      ],
      "timestamp": "2026-10-30T19:04:41.632189+00:00",
      "status_notes": "Vulnerability CVE-2026-76182 is fixed in version 11.0.34.tuxcare0001 of org.eclipse.jetty:jetty-deploy.",
      "vulnerability": {
        "name": "CVE-2026-76182"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.eclipse.jetty/jetty-deploy@11.0.34.tuxcare0001",
          "identifiers": {
            "purl": "pkg:maven/org.eclipse.jetty/jetty-deploy@11.0.34.tuxcare0001"
          }
        }
      ],
      "timestamp": "2026-10-30T19:04:41.632189+00:00",
      "status_notes": "Vulnerability CVE-2026-76184 is fixed in version 11.0.34.tuxcare0001 of org.eclipse.jetty:jetty-deploy.",
      "vulnerability": {
        "name": "CVE-2026-76184"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.eclipse.jetty/jetty-deploy@11.0.34.tuxcare0001",
          "identifiers": {
            "purl": "pkg:maven/org.eclipse.jetty/jetty-deploy@11.0.34.tuxcare0001"
          }
        }
      ],
      "timestamp": "2026-10-30T19:04:41.632189+00:00",
      "status_notes": "Vulnerability CVE-2026-77711 is fixed in version 11.0.34.tuxcare0001 of org.eclipse.jetty:jetty-deploy.",
      "vulnerability": {
        "name": "CVE-2026-77711"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.eclipse.jetty/jetty-deploy@11.0.34.tuxcare0001",
          "identifiers": {
            "purl": "pkg:maven/org.eclipse.jetty/jetty-deploy@11.0.34.tuxcare0001"
          }
        }
      ],
      "timestamp": "2026-10-30T19:05:00.113792+00:00",
      "status_notes": "Vulnerability CVE-2026-95533 is fixed in version 11.0.34.tuxcare0001 of org.eclipse.jetty:jetty-deploy.",
      "vulnerability": {
        "name": "CVE-2026-95533"
      }
    }
  ]
}