{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f5d3d446-f617-5edd-8a93-6406a234804e",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "undertow-benchmarks",
      "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2",
      "type": "library",
      "group": "io.undertow",
      "bom-ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2",
      "version": "2.3.17.Final-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "undertow-benchmarks",
            "purl": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final",
            "type": "library",
            "group": "io.undertow",
            "version": "2.3.17.Final"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2014-7816",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9ab0ff0f-2f29-5637-ba28-39aba5a6ed5d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-7816 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2016-7046",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:49fdb980-e7eb-5ed9-b983-506ea33db942",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-7046 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2017-12165",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6b01e9d4-c0e0-52bd-8ee6-fd8e1d931798",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-12165 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2017-12196",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:46cc7752-3bbb-5a3b-8d5f-92b2c4947670",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-12196 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2017-2666",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f0d5e482-1f4c-54c4-83e0-c995b4e1595e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-2666 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2017-2670",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:22f51c61-bd22-5252-bfce-acff72b61b7d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-2670 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2017-7559",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2439b4d9-0b6f-543d-828e-067f223d1cea",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7559 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2018-1114",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1a7af80d-1cfe-55fa-b09b-29d1b2a81372",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1114 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2018-14642",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d3e88afd-cbda-5284-b919-992ebcb0c14c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-14642 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2019-10212",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a11f4b97-f694-566e-b339-13ca05453801",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10212 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2019-14888",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8bf7b0ad-579f-5fdc-8b1e-9dcecf5baec3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-14888 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2019-3888",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2d28deed-df20-5c2b-846e-935ef6c3d3e6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-3888 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2020-10687",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2f4ff19f-68b0-5097-ac99-e3d6285f4f40",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10687 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2020-10705",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dac7487f-d7cc-560a-a4b7-98d0522a875d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10705 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2020-10719",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ab008a49-9bc7-52fd-aa4a-eaecc39000e9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10719 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2020-1745",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6d9a3a8b-4ef2-50cc-85c7-64c59b31c8cd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-1745 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2020-1757",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1734d89b-f728-5c5f-816d-387e4c89f98c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-1757 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2020-27782",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:071d168e-ad92-54c9-80f4-575fd43feb6d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27782 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2021-20220",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d53c34ed-3feb-5f9c-a89d-21ebe125c69c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-20220 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2021-3597",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9f5ac224-f79a-59a6-b8c8-caa7ae2163a2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3597 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2021-3629",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d956e003-f74a-5420-b040-bee5f2bb6ad4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3629 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2021-3690",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:057961f4-6fa0-5949-b24c-9f7cf4434609",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3690 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2021-3859",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c7ebf83f-c545-58f9-87ce-0ae2df18de56",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3859 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2022-2053",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e0bfd317-012d-5221-8f9e-9d5e3dcad4b1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-2053 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2022-4492",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:516bd7a9-9cb6-5fdf-a871-efc6af16ea03",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-4492 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2023-1108",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fb65a911-45dd-5993-bb73-347dc0a70363",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-1108 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2023-1973",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f446cfbb-0ced-52f6-87e7-8350e6305f35",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-1973 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2023-4639",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d8c05531-79d6-5d19-9495-a657328c2a2c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-4639 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2024-1459",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1a95d1f3-5bad-570c-98a5-807e8a4d16fa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-1459 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2024-1635",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0c4c0c01-c89e-5b45-934b-f821b367348d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-1635 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2024-3653",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:11169bd7-680c-5d81-a50c-190837733bbc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-3653 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2024-3884",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1d4ca6ba-ede9-5cb2-bb7e-4b4227c75eeb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-3884 is fixed in version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2024-4027",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b7d443f6-b245-5900-b066-97de64d0f1f8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-4027 is fixed in version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2024-4109",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7f7414d7-c00b-59cd-a9f3-8235c1cb97a8",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2024-4109 is a false positive for io.undertow:undertow-benchmarks 2.3.17.Final-tuxcare.2."
      }
    },
    {
      "id": "CVE-2024-5971",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:62bceb67-cd11-5c76-9d1d-24fd6cc3e8fe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-5971 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2024-6162",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e244d352-197e-5d49-bf13-302112c4742d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6162 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2024-7885",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:35d5e68c-0d34-5431-977c-607923be0cb3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-7885 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2025-12543",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c9ebdf23-7af2-5e43-bddc-2932114742bb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-12543 is fixed in version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2025-9784",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2398f091-2eea-58f1-ab83-65dd521d5029",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-9784 is fixed in version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    },
    {
      "id": "CVE-2026-3260",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3b4a582b-d2f7-5666-ad00-c0cba5f2cf6a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-3260 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-benchmarks."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.undertow/undertow-benchmarks@2.3.17.Final-tuxcare.2"
    }
  ]
}