{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:0ff6845b-7576-56a4-8356-84dde7ff2eac",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1",
      "type": "library",
      "group": "org.apache.activemq.tooling",
      "name": "activemq-maven-plugin",
      "version": "6.1.8-tuxcare.1",
      "purl": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:7ef673a4-7eab-5a0e-ae13-cf908967c09a",
      "id": "CVE-2025-66168",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66168 affects version 6.1.8-tuxcare.1 of org.apache.activemq.tooling:activemq-maven-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:276fbe56-79ca-52d5-84eb-f9013b4fe810",
      "id": "CVE-2026-33227",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33227 affects version 6.1.8-tuxcare.1 of org.apache.activemq.tooling:activemq-maven-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03be2ac1-1468-514c-8d12-7514547d0a85",
      "id": "CVE-2026-34197",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34197 affects version 6.1.8-tuxcare.1 of org.apache.activemq.tooling:activemq-maven-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:719eeed4-d5e2-5f46-af50-b0c6278fc197",
      "id": "CVE-2026-39304",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39304 affects version 6.1.8-tuxcare.1 of org.apache.activemq.tooling:activemq-maven-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b532391-f538-5f81-bdbd-089a946cefaa",
      "id": "CVE-2026-40046",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40046 affects version 6.1.8-tuxcare.1 of org.apache.activemq.tooling:activemq-maven-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e129bf94-aade-5bfe-a2ab-cdbdfae5d3dc",
      "id": "CVE-2026-40466",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40466 affects version 6.1.8-tuxcare.1 of org.apache.activemq.tooling:activemq-maven-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18a3a531-f124-518c-b72a-e127dfd7e9c1",
      "id": "CVE-2026-41043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41043 affects version 6.1.8-tuxcare.1 of org.apache.activemq.tooling:activemq-maven-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b12b7c5a-e639-582a-850e-da902bc88351",
      "id": "CVE-2026-41044",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41044 affects version 6.1.8-tuxcare.1 of org.apache.activemq.tooling:activemq-maven-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc8e58fc-a408-510f-a0ed-84ca134e48ce",
      "id": "CVE-2026-42253",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42253 affects version 6.1.8-tuxcare.1 of org.apache.activemq.tooling:activemq-maven-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8286ab13-450a-5a9c-96b4-fe8adcdf7cc2",
      "id": "CVE-2026-42588",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42588 affects version 6.1.8-tuxcare.1 of org.apache.activemq.tooling:activemq-maven-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e5ee38e-9f50-5bb2-a384-4508834740bf",
      "id": "CVE-2026-45505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45505 affects version 6.1.8-tuxcare.1 of org.apache.activemq.tooling:activemq-maven-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f414c8d-657d-522a-a8eb-39f88d3082ca",
      "id": "CVE-2026-46605",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46605 affects version 6.1.8-tuxcare.1 of org.apache.activemq.tooling:activemq-maven-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c028252-16da-52df-b198-cab6cf0a33b8",
      "id": "CVE-2026-49157",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49157 affects version 6.1.8-tuxcare.1 of org.apache.activemq.tooling:activemq-maven-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9a3a2c7-6bc1-52d4-b247-c4f4df4bc806",
      "id": "CVE-2026-49270",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49270 affects version 6.1.8-tuxcare.1 of org.apache.activemq.tooling:activemq-maven-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5adfdf55-ca8a-5ad7-a7e2-aac75cfae000",
      "id": "CVE-2026-49432",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49432 affects version 6.1.8-tuxcare.1 of org.apache.activemq.tooling:activemq-maven-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d401275f-3e5e-534f-802a-24c269569885",
      "id": "CVE-2026-49434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49434 affects version 6.1.8-tuxcare.1 of org.apache.activemq.tooling:activemq-maven-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9580aa8-ad0f-5db1-b913-3efecada3b40",
      "id": "CVE-2026-49877",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49877 affects version 6.1.8-tuxcare.1 of org.apache.activemq.tooling:activemq-maven-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7273ef48-35a6-5f28-a4bd-5b93ec0a2c18",
      "id": "CVE-2026-50734",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50734 affects version 6.1.8-tuxcare.1 of org.apache.activemq.tooling:activemq-maven-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:601456c7-9ffc-55ac-bbc1-7c379d5817ae",
      "id": "CVE-2026-52760",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52760 affects version 6.1.8-tuxcare.1 of org.apache.activemq.tooling:activemq-maven-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8021f3d3-4e73-52b0-833f-4a06d6eea724",
      "id": "CVE-2026-53916",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53916 affects version 6.1.8-tuxcare.1 of org.apache.activemq.tooling:activemq-maven-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9661635-80e8-5d00-bbe7-98fc42c94551",
      "id": "CVE-2026-53917",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53917 affects version 6.1.8-tuxcare.1 of org.apache.activemq.tooling:activemq-maven-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dcac832a-bb8c-5a5e-980b-8fba75857e93",
      "id": "CVE-2026-54475",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54475 affects version 6.1.8-tuxcare.1 of org.apache.activemq.tooling:activemq-maven-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:902c7bd5-e416-51b7-8e07-f045758005b9",
      "id": "CVE-2026-59878",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59878 affects version 6.1.8-tuxcare.1 of org.apache.activemq.tooling:activemq-maven-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92390faa-ad00-5871-996d-a23ad37d4a46",
      "id": "CVE-2026-61487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-61487 affects version 6.1.8-tuxcare.1 of org.apache.activemq.tooling:activemq-maven-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ca6ab49-480b-545c-9634-e04ac0085b32",
      "id": "CVE-2026-74761",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-74761 affects version 6.1.8-tuxcare.1 of org.apache.activemq.tooling:activemq-maven-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq.tooling/activemq-maven-plugin@6.1.8-tuxcare.1"
    }
  ]
}