{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2fc1acf1-9f5b-5c25-9a1c-178fd6bcfebc",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "undertow-examples",
      "purl": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1",
      "type": "library",
      "group": "io.undertow",
      "bom-ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1",
      "version": "2.3.24.Final-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "undertow-examples",
            "purl": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final",
            "type": "library",
            "group": "io.undertow",
            "version": "2.3.24.Final"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2014-7816",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b3fab23b-b1a7-5113-808a-45802cbc03f3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-7816 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2016-7046",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d5c5709d-c00b-59de-8a62-b27138d2af8f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-7046 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2017-12165",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d64131bb-c28b-51cf-8805-e7745b9064a3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-12165 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2017-12196",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c2c26e16-cb27-5889-bbcf-137b994110e6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-12196 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2017-2666",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:66e014e8-e796-5b61-98b8-cc0f9a07b5d1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-2666 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2017-2670",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:585d0d83-dd9a-50ed-929d-b181de7ffa8b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-2670 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2017-7559",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:663009b9-058d-50fe-8981-ab91c91ebe1c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7559 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2018-1114",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:42bbd484-8ac4-56d7-b296-7e85057cfdff",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1114 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2018-14642",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:32109df3-3c48-574e-9b72-b5f4b961c9e0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-14642 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2019-10184",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7cec8633-1d31-5a66-a1a5-1b8433e0a2c6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10184 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2019-10212",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:396f84be-a057-5bfe-ba5d-47c056993b2f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10212 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2019-14888",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ca10d64a-62e7-54b2-bd6d-df51b7cfb809",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-14888 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2019-3888",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:48d7bea5-f6bb-53c4-905a-865a211151e1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-3888 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2020-10687",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bd060b4a-f906-58be-ab0b-785802c1f4c0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10687 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2020-10705",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:494e7c85-6961-5f73-a8f7-b942395f44bd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10705 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2020-10719",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:474a44bf-9cc7-5d47-8eda-0ad64f572582",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10719 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2020-1745",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5fcdc67e-f28a-5b8c-9251-6a9ca9638837",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-1745 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2020-1757",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:03c1aad6-161e-5ff9-a875-5b1b42b39e09",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-1757 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2020-27782",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6361a3ae-68ea-5602-99db-027aa83ed633",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27782 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2021-20220",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3bad97fa-3dca-51c7-977f-3efb0a11e54c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-20220 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2021-3597",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ddfb5a33-0ff3-5deb-aeff-1da644d7f2b3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3597 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2021-3629",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dcdcbf7d-a6cb-5e2f-8f96-e57187078169",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3629 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2021-3690",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:97dfa004-f229-5e64-ab1e-94af76f5be74",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3690 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2021-3859",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:15275672-a119-5619-b948-7fde08a73657",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3859 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2022-2053",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ab9d75e8-1d62-53af-9e6b-aed3cee502d5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-2053 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2022-4492",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:354e9592-0d1b-55c5-946b-470bd095c90a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-4492 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2023-1108",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c5679a33-56a1-5112-a37e-c4cadf7b5f40",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-1108 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2023-1973",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2dcc2b4f-34fb-5e93-a61e-a91e6ce0e744",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-1973 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2023-4639",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7c70750f-6c7a-5682-93d6-4f3d091e374c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-4639 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2024-1459",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:92f83969-3fb0-522c-b2f5-8108f6a4ce6c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-1459 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2024-1635",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d377ddef-3709-54f8-b99f-fee9e17f7782",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-1635 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2024-3653",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:809f41da-f118-5e0a-b6cc-91e88c493476",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-3653 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2024-3884",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d126c608-2b71-5e27-a394-ce5d48ba6e95",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-3884 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2024-4027",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:755d9038-47d2-539b-b37b-793c261c60d2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-4027 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2024-4109",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c232b2fd-54f0-5373-b4f5-499a11575e11",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2024-4109 is a false positive for io.undertow:undertow-examples 2.3.24.Final-tuxcare.1."
      }
    },
    {
      "id": "CVE-2024-5971",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7c4d54bb-04e1-528c-b2d0-05a9cb70707e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-5971 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2024-6162",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:93fdc6e1-789d-5b88-aea0-6c53656d638c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6162 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2024-7885",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a8435e84-6700-547d-9bea-fb67abb33701",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-7885 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2025-12543",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9d4e2bab-7e69-5e8c-ba02-a947dc881578",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-12543 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2025-9784",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6c2982aa-b216-5425-bd90-f9b7a5727ea7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-9784 affects version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples."
      }
    },
    {
      "id": "CVE-2026-3260",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7abd7779-d598-5a38-9adb-abce8eb9fd87",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-3260 does not affect version 2.3.24.Final-tuxcare.1 of io.undertow:undertow-examples. already_fixed \u2014 The target repository (Undertow 2.3.24.Final) already contains the fix for CVE-2026-3260. The upstream fix (UNDERTOW-2677) was included in version 2.3.24.Final before it was onboarded to TuxCare. The fix prevents the multipart parser from overriding application-configured entity size limits.",
        "justification": "code_not_present"
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.undertow/undertow-examples@2.3.24.Final-tuxcare.1"
    }
  ]
}