{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:695b1849-d283-5f7d-914d-379fef230b66",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "undertow-core",
      "purl": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8",
      "type": "library",
      "group": "io.undertow",
      "bom-ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8",
      "version": "2.3.10.Final-tuxcare.8",
      "pedigree": {
        "ancestors": [
          {
            "name": "undertow-core",
            "purl": "pkg:maven/io.undertow/undertow-core@2.3.10.Final",
            "type": "library",
            "group": "io.undertow",
            "version": "2.3.10.Final"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2014-7816",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:8d3cb3d3-c0d7-51df-805d-b94b7c65c48a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-7816 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2016-7046",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:fdd9c9c9-8ba9-58ec-a003-363a6bc5d63b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-7046 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2017-12165",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:09b29c31-f924-5617-a30b-7bf8352a4466",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-12165 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2017-12196",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:4db81d8a-985a-5360-95ef-d29fc5e0157e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-12196 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2017-2666",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:e52cfdfb-2b76-5c77-a637-5cd42b221ec9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-2666 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2017-2670",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:aa1e5d1f-c159-514a-9843-d0c6c6b7c7e7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-2670 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2017-7559",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:d3e6064c-70a8-52ba-bdd4-db42585a1188",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7559 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2018-1114",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:ac4cddc8-600e-5de8-b3d0-b100fb829bdf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1114 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2018-14642",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:cb438677-4809-59c1-976b-9ad64cd77abb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-14642 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2019-10212",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:6a94d1c4-f034-5385-b160-a7e1fef546d7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10212 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2019-14888",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:04718bae-3eb9-589c-a6d1-c2be645f63ae",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-14888 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2019-3888",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:f751d548-a76a-5873-9bc0-8c3e39c289ea",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-3888 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2020-10687",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:4cc823d4-b5a2-5dcb-91c6-4877d58b2392",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10687 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2020-10705",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:bcb950a1-3b93-582e-a99b-a729accc6d1a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10705 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2020-10719",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:393238e5-7df9-5fe9-a7c0-5af3db68c84e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10719 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2020-1745",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:17ae23ee-fbf1-5059-8cfe-2a829ea746fd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-1745 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2020-1757",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:3188cd3c-42c5-5cb5-b869-ec2a1535b2fe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-1757 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2020-27782",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:8606989a-9690-5853-b717-94ab1e54c372",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27782 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2021-20220",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:bbc4deb1-3e53-5ac0-9ec3-3a351d1bee4c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-20220 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2021-3597",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:97878481-ba2b-52cb-9fd9-61e697c3e2bc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3597 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2021-3629",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:9a70312f-3c2f-51c2-835a-3d385ee4c6e4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3629 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2021-3690",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:394c1128-0a26-5fe1-8834-6431733537d3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3690 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2021-3859",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:1e4e65ce-b8ff-5b32-ac66-ff6ebe92b4a4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3859 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2022-2053",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:03fcb8ef-5069-5d33-97f5-d6beaa770bcb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-2053 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2022-4492",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:750ac6df-2836-5759-aad3-6dcf5e564eac",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-4492 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2023-1108",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:c06de45a-7277-53db-801e-5b7676763f45",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-1108 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2023-1973",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:5167a30f-84a0-5034-aecb-5d66b503f4a4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-1973 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2023-4639",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:a32fd13a-2058-5d60-81c0-7ab6d6a5487b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-4639 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2024-1459",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:d6bf2acf-7847-5c97-a25d-442b505e0c11",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-1459 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2024-1635",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:5f572742-675d-5974-8b9c-bace4a92bd94",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-1635 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2024-3653",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:19e48e7e-9c12-5caa-9d7f-7f7ab095ceb7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-3653 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2024-3884",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:74480291-b127-58d4-9c09-703c58d72145",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-3884 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2024-4027",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:e0d0dcba-4e42-5dd1-8023-8cbcb742ce8d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-4027 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2024-4109",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:50b34f1b-8e54-537e-b3c8-382ddc626527",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2024-4109 is a false positive for io.undertow:undertow-core 2.3.10.Final-tuxcare.8."
      }
    },
    {
      "id": "CVE-2024-5971",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:fa87c5c4-4a5d-5f61-a216-3ffaccf9d9ae",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-5971 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2024-6162",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:1931f6b6-9a46-5f29-aab2-947d416ce861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-6162 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2024-7885",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:0d032e4c-b6b2-52b0-8a09-7fe84f476359",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-7885 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2025-12543",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:18576c71-8cc4-59a5-8ccd-ff9ca67c1d2c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-12543 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2025-9784",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:70fe2b46-6226-5fe3-9524-cf45f015a000",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-9784 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2026-3260",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:d7bda95f-06dd-59ec-8f92-6ee287113440",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-3260 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.undertow/undertow-core@2.3.10.Final-tuxcare.8"
    }
  ]
}