{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:82ee54be-a0a4-53c4-9a2b-bf1e19409a29",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "artemis-jakarta-rar",
      "purl": "pkg:maven/org.apache.activemq.examples.modules/artemis-jakarta-rar@2.28.0-tuxcare.1",
      "type": "library",
      "group": "org.apache.activemq.examples.modules",
      "bom-ref": "pkg:maven/org.apache.activemq.examples.modules/artemis-jakarta-rar@2.28.0-tuxcare.1",
      "version": "2.28.0-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "artemis-jakarta-rar",
            "purl": "pkg:maven/org.apache.activemq.examples.modules/artemis-jakarta-rar@2.28.0",
            "type": "library",
            "group": "org.apache.activemq.examples.modules",
            "version": "2.28.0"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2020-10727",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.examples.modules/artemis-jakarta-rar@2.28.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2b2e7d8c-2ab1-554e-9c15-716fc91e0ddd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10727 affects version 2.28.0-tuxcare.1 of org.apache.activemq.examples.modules:artemis-jakarta-rar."
      }
    },
    {
      "id": "CVE-2021-4040",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.examples.modules/artemis-jakarta-rar@2.28.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d1d95c91-3588-5822-90d2-f12232f86d94",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-4040 affects version 2.28.0-tuxcare.1 of org.apache.activemq.examples.modules:artemis-jakarta-rar."
      }
    },
    {
      "id": "CVE-2022-23913",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.examples.modules/artemis-jakarta-rar@2.28.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ab3ba1a1-db32-5a01-9947-22d78c79e654",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-23913 affects version 2.28.0-tuxcare.1 of org.apache.activemq.examples.modules:artemis-jakarta-rar."
      }
    },
    {
      "id": "CVE-2022-35278",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.examples.modules/artemis-jakarta-rar@2.28.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ddb641e0-8f29-5b00-a7b2-3847203bb2eb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35278 affects version 2.28.0-tuxcare.1 of org.apache.activemq.examples.modules:artemis-jakarta-rar."
      }
    },
    {
      "id": "CVE-2025-27427",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.examples.modules/artemis-jakarta-rar@2.28.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3c29198b-1f13-5bcf-bbb3-0f913f7de40a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-27427 is fixed in version 2.28.0-tuxcare.1 of org.apache.activemq.examples.modules:artemis-jakarta-rar."
      }
    },
    {
      "id": "CVE-2026-27446",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.examples.modules/artemis-jakarta-rar@2.28.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:532dc545-6bfd-5d0f-b370-d0e98e170a77",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-27446 affects version 2.28.0-tuxcare.1 of org.apache.activemq.examples.modules:artemis-jakarta-rar."
      }
    },
    {
      "id": "CVE-2026-49362",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.examples.modules/artemis-jakarta-rar@2.28.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5683f324-aa13-5d08-98ef-ef043b81a54d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49362 affects version 2.28.0-tuxcare.1 of org.apache.activemq.examples.modules:artemis-jakarta-rar."
      }
    },
    {
      "id": "CVE-2026-49363",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.examples.modules/artemis-jakarta-rar@2.28.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:17999e42-0085-5e90-aa08-a56cacd15326",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49363 affects version 2.28.0-tuxcare.1 of org.apache.activemq.examples.modules:artemis-jakarta-rar."
      }
    },
    {
      "id": "CVE-2026-49364",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.examples.modules/artemis-jakarta-rar@2.28.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:091b06b2-91b4-5b3a-a7a0-9df158c368e7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49364 affects version 2.28.0-tuxcare.1 of org.apache.activemq.examples.modules:artemis-jakarta-rar."
      }
    },
    {
      "id": "CVE-2026-57822",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.examples.modules/artemis-jakarta-rar@2.28.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:862b7552-5286-5468-bdc5-8521fbdc64d7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-57822 affects version 2.28.0-tuxcare.1 of org.apache.activemq.examples.modules:artemis-jakarta-rar."
      }
    },
    {
      "id": "CVE-2026-57967",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.examples.modules/artemis-jakarta-rar@2.28.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2dc34759-c665-5b6e-818e-43904cee15ff",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-57967 affects version 2.28.0-tuxcare.1 of org.apache.activemq.examples.modules:artemis-jakarta-rar."
      }
    },
    {
      "id": "CVE-2026-75880",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.examples.modules/artemis-jakarta-rar@2.28.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2e195cb4-453b-581a-873e-7ff1684d0b68",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-75880 affects version 2.28.0-tuxcare.1 of org.apache.activemq.examples.modules:artemis-jakarta-rar."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq.examples.modules/artemis-jakarta-rar@2.28.0-tuxcare.1"
    }
  ]
}