{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f52259a5-5121-5824-9404-d169140cad70",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "undertow-dist",
      "purl": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2",
      "type": "library",
      "group": "io.undertow",
      "bom-ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2",
      "version": "2.3.17.Final-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "undertow-dist",
            "purl": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final",
            "type": "library",
            "group": "io.undertow",
            "version": "2.3.17.Final"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2014-7816",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d621a2d6-8c5b-5ca2-8fcf-814e87805361",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-7816 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2016-7046",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4ae65118-f41f-574d-a41f-d238ba42046f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-7046 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2017-12165",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:82d39245-de11-516a-ba82-ed14f1b8c352",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-12165 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2017-12196",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0e8a73c6-1a33-5f06-9239-9aaec461ad68",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-12196 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2017-2666",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:42bf4258-f220-5d12-b8bb-83f79946ec3e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-2666 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2017-2670",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ff77ed5c-c715-5910-9c22-0364ac4aefd1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-2670 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2017-7559",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4f775778-bbd2-5696-bcea-ac93bc78653e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7559 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2018-1114",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b1142a93-1126-5155-a66d-e125eecba1ef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1114 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2018-14642",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:56c84639-d02e-5ecb-8527-2e0472f2d254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-14642 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2019-10184",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7e68c524-e601-5726-8dae-1b66ce92f4bc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10184 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2019-10212",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e8e67794-035f-5f84-9c91-cd3b3b96ceae",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10212 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2019-14888",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d8be8234-f59e-51bc-bbc9-7151397747fb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-14888 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2019-3888",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e4d949f3-fd9e-52e8-8df6-0593aecab0c9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-3888 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2020-10687",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:36759547-d6cf-5fe6-9960-f697b31b15c2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10687 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2020-10705",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4da3d80e-9876-5437-8912-9f0355bf2e77",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10705 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2020-10719",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c64f94ea-536f-571d-b555-4d2c3913233e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10719 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2020-1745",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:253677df-b98f-57da-8adb-be5cef769fa4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-1745 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2020-1757",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3714e2a4-63cb-5ea2-a574-1e1d62b737c6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-1757 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2020-27782",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bac6ce64-91b4-50d5-8ffc-6dc116612ce6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27782 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2021-20220",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0ebe9f28-6667-51c2-90f1-375416da43c8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-20220 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2021-3597",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dbbfbe9d-5040-58c6-9fcb-9926368c2c0c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3597 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2021-3629",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c61e84e1-a20f-51e4-bbb5-993db86372a0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3629 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2021-3690",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4708c392-f11d-5667-80b0-1f1c4e3aaced",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3690 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2021-3859",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3942d69b-49db-5e0e-8af9-2aed2b488992",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3859 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2022-2053",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a19ff6d9-b069-5a31-b2e8-df370985dad8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-2053 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2022-4492",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d1475ee9-0cee-5010-8026-ae114f30ea15",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-4492 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2023-1108",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7c0575f7-629a-5517-abc5-50ad7762c214",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-1108 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2023-1973",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:27125027-acbd-5dfa-ba68-ec588880aeb9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-1973 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2023-4639",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:95faaf08-694f-55f7-8e42-77e0112602d0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-4639 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2024-1459",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a65a9e0c-56da-5698-8d2d-8ffb70fc4a01",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-1459 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2024-1635",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bd89d3f4-8a1d-5912-81e3-8cb4adc0ab3b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-1635 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2024-3653",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b120eebc-b873-510b-9669-475784bb6da2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-3653 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2024-3884",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e4ddcc94-ff6f-5217-afa1-d99b9d48a3d2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-3884 is fixed in version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2024-4027",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3bd66d5d-8af8-5fc3-944b-44195ce55512",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-4027 is fixed in version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2024-4109",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1eb91d10-d0f4-5709-9d9c-673e0eac3b47",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2024-4109 is a false positive for io.undertow:undertow-dist 2.3.17.Final-tuxcare.2."
      }
    },
    {
      "id": "CVE-2024-5971",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:106d4462-26cf-5d31-9168-f4f6f01a4952",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-5971 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2024-6162",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:09f7e655-0943-5885-b0d9-306d15d932c8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6162 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2024-7885",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:95a9f78d-701c-5fd7-b8e5-0c5a6eef99d2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-7885 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2025-12543",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a7ca4aa6-7f52-529f-958b-e3f9f4b8c779",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-12543 is fixed in version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2025-9784",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5ef5ffb7-250c-5300-8a8b-9abcd6fc4fd8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-9784 is fixed in version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2026-3260",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0d0d9435-3a15-5356-b952-481a256aabdf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-3260 affects version 2.3.17.Final-tuxcare.2 of io.undertow:undertow-dist."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.undertow/undertow-dist@2.3.17.Final-tuxcare.2"
    }
  ]
}