{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d3f3a863-57e4-5ffe-8e4f-b48b4d02b0d8",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "undertow-core",
      "purl": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2",
      "type": "library",
      "group": "io.undertow",
      "bom-ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2",
      "version": "2.3.17.Final-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "undertow-core",
            "purl": "pkg:maven/io.undertow/undertow-core@2.3.17.Final",
            "type": "library",
            "group": "io.undertow",
            "version": "2.3.17.Final"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2014-7816",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:94309053-7673-57b9-b879-be02b4b852b1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-7816 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2016-7046",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2af5ae8c-248d-5ad7-b621-052802ca04d4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-7046 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2017-12165",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:28a1a5cc-757b-5ac8-a596-51ddc8cdb08f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-12165 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2017-12196",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b19f356c-fcde-516d-ac91-88eefa96380f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-12196 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2017-2666",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dd33aaa8-9ee9-5e81-a3fa-767c65402a76",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-2666 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2017-2670",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:45638788-8d21-5435-ab86-7fd73612c74c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-2670 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2017-7559",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5e54600c-5e08-5a7e-9d28-b8cb820cee14",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7559 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2018-1114",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e131c724-fa7c-5335-8a48-4376c6d80f4d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1114 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2018-14642",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7bd4fd45-fb54-52bd-8ece-cd7cb1ab714c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-14642 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2019-10212",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:87ea9209-723d-50d0-a989-5ed0956bc766",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10212 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2019-14888",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7954a77d-9935-5b32-b15b-e1bc3328f466",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-14888 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2019-3888",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:83070f4f-56f1-5dfd-beeb-c4adc8ce3137",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-3888 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2020-10687",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d41420a3-4f2f-57af-96b1-2ed9acb1a6aa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10687 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2020-10705",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5a29bcc5-7567-5c78-91d9-294ca51bc27d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10705 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2020-10719",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:daa5af6b-29de-5e9d-99d9-281023f7e45d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10719 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2020-1745",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4f810221-6596-596e-9969-805a41c88a84",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-1745 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2020-1757",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f5729758-5203-5f3c-833f-cfc203caa51c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-1757 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2020-27782",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e4c3f175-d71d-5146-a5f9-07288e2fc0b1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27782 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2021-20220",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:83be3c62-d480-573e-b7e5-b5f3090e9f53",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-20220 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2021-3597",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:137d3ea6-48d7-5df5-aacd-3d1074c9a275",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3597 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2021-3629",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:02231ed6-cde0-5261-923e-aa97e245fe44",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3629 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2021-3690",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4d641c04-56e1-56c0-8b18-e8e4187d2696",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3690 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2021-3859",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fa13d880-a43e-5119-ac12-d845b039bf7a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3859 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2022-2053",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2215a02a-e149-544c-8218-2910897feea3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-2053 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2022-4492",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8c9b0f21-83a7-556d-b539-eeb99d8f50dd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-4492 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2023-1108",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:293b1db4-f61a-5cd4-afb7-4baa1bc838ea",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-1108 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2023-1973",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2e9d80db-e3b0-56ae-b883-7bf54a46ef44",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-1973 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2023-4639",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:aa5642af-b06c-5bc6-8bd0-d7d175332687",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-4639 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2024-1459",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bc1a8ba6-b37a-5f69-a9de-4493289feebd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-1459 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2024-1635",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7a4f8679-a39f-5b14-ad4e-f0f42887c775",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-1635 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2024-3653",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4fd15aa0-a011-5ad7-939e-12b34eb84ac4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-3653 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2024-3884",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:aa93a7af-f4ad-56c6-9a90-125cac0b160d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-3884 is fixed in version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2024-4027",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b3ac2e4b-a06b-5c23-912b-870ba4dd3841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-4027 is fixed in version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2024-4109",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:61e5cd17-173d-5365-b2ca-22724bed62c4",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2024-4109 is a false positive for io.undertow:undertow-core 2.3.17.Final-tuxcare.2."
      }
    },
    {
      "id": "CVE-2024-5971",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:83a2070c-16e9-5cff-9979-9d1ec857dcbd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-5971 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2024-6162",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bab14978-c58b-5811-9754-2a6aecdb8b69",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6162 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2024-7885",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:eaa0f988-0f3b-55ec-a11b-38b6137f6c96",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-7885 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2025-12543",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:29aaa8e1-5a4d-50c9-b2bc-7e93a267cf90",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-12543 is fixed in version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2025-9784",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2a7bb68d-db20-55a7-a1e3-214798e8aaea",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-9784 is fixed in version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    },
    {
      "id": "CVE-2026-3260",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f1561420-01e3-5538-8fae-9c7d3ef2c3e7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-3260 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.undertow/undertow-core@2.3.17.Final-tuxcare.2"
    }
  ]
}