{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e19eb551-31c3-5aa7-865c-147dfe184070",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "undertow-dist",
      "purl": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8",
      "type": "library",
      "group": "io.undertow",
      "bom-ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8",
      "version": "2.3.10.Final-tuxcare.8",
      "pedigree": {
        "ancestors": [
          {
            "name": "undertow-dist",
            "purl": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final",
            "type": "library",
            "group": "io.undertow",
            "version": "2.3.10.Final"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2014-7816",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:ee753985-75fa-5341-b9c8-a720ccf1e31a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-7816 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2016-7046",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:0e573fad-e5a2-59d2-acbf-24467a30d2b2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-7046 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2017-12165",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:5a424e04-aa22-5091-bc81-8038206ab0b3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-12165 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2017-12196",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:0a1b9813-a993-5b66-b023-f010b42d1af7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-12196 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2017-2666",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:bdeb9d65-4e36-5958-8b9c-e76770e2eda2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-2666 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2017-2670",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:b6d2f441-3510-5126-99c0-d8c8eb863188",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-2670 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2017-7559",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:c0da7d35-02b7-5afa-b085-325b7fd7a5ca",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7559 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2018-1114",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:43e55988-3f61-534c-9f5d-104cdc4ffbdf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1114 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2018-14642",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:573138f1-da30-5352-9088-99696bdb9b43",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-14642 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2019-10184",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:6fad141f-1e8a-5167-b0b8-16ca83b0997e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10184 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2019-10212",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:e0546770-9da2-5de6-b856-2e889f900db7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10212 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2019-14888",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:c64d28d5-74eb-54d3-a00a-07a945d7478b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-14888 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2019-3888",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:cb5c66ec-ec92-5d76-b32f-6a2f8bcc6f66",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-3888 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2020-10687",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:aab37312-776c-5a2a-a672-89900246e04f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10687 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2020-10705",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:cf72793a-3d9f-58f0-acf5-3292d8220aeb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10705 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2020-10719",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:d44848fe-a45c-5b41-9d8c-1d6869962d14",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10719 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2020-1745",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:48dd4e0f-a1e3-5493-81c0-c83d8eb0d825",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-1745 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2020-1757",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:e0c9aadf-356f-559f-a56d-710fa03d576d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-1757 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2020-27782",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:9aae0ca1-2851-5371-946a-778bc5fc928e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27782 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2021-20220",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:d01e2bd2-7662-5904-ae44-b842bdd3774d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-20220 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2021-3597",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:5900a972-8b00-56ba-9eb1-0dae2530ce03",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3597 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2021-3629",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:68adc9b4-b397-51ae-b9b4-9bf81e7d46ef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3629 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2021-3690",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:50405f29-9745-5d0b-a0a2-4e29f72f006d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3690 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2021-3859",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:a8bb8c17-a491-5b28-9d05-627665cabf2a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3859 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2022-2053",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:66d5d50d-34e7-52a1-bc01-cb7a18c10bda",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-2053 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2022-4492",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:c26a64f1-523a-5978-af5e-078ad43850f9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-4492 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2023-1108",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:3ff16cb8-6793-51c1-a7fb-aa53b3ae802c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-1108 affects version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2023-1973",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:497366bb-8f68-5d25-a778-21fc37736885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-1973 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2023-4639",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:be1459ee-842d-56dd-8630-35fa53737960",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-4639 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2024-1459",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:87a8dc1b-4c7a-51db-b80e-1f0f7eac6029",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-1459 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2024-1635",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:8787b8cc-27fe-5ca3-b16e-c26e9689b369",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-1635 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2024-3653",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:a32c5ddd-b022-5412-bd97-e7a2491b2515",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-3653 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2024-3884",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:09eb9419-8cee-5899-a76f-f33187632888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-3884 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2024-4027",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:20d1b023-ae5c-587d-9bdd-4ac5eec51ecc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-4027 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2024-4109",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:e8d74402-a4dc-5ee4-9abd-55433fb92863",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2024-4109 is a false positive for io.undertow:undertow-dist 2.3.10.Final-tuxcare.8."
      }
    },
    {
      "id": "CVE-2024-5971",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:25327205-4fea-50d8-a1bb-b31cf9987267",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-5971 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2024-6162",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:0f65e736-3cb1-57dd-abe6-748cb7d44c47",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-6162 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2024-7885",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:fb6a92d9-1d3e-5125-835f-0c4ed5316f9a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-7885 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2025-12543",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:8b8a5170-21c1-51b2-b029-02ea55b62ad8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-12543 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2025-9784",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:d071d928-ce99-5db1-9d14-2cb904eb07b4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-9784 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2026-3260",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:b4b47c6e-fe06-595a-b0f1-93c9e324d99b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-3260 is fixed in version 2.3.10.Final-tuxcare.8 of io.undertow:undertow-dist."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.undertow/undertow-dist@2.3.10.Final-tuxcare.8"
    }
  ]
}