{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4d37e69a-9366-582c-82df-c01f8c1f6e1a",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "activemq-memtest-maven-plugin",
      "purl": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1",
      "type": "library",
      "group": "org.apache.activemq.tooling",
      "bom-ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1",
      "version": "6.1.6-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "activemq-memtest-maven-plugin",
            "purl": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6",
            "type": "library",
            "group": "org.apache.activemq.tooling",
            "version": "6.1.6"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2013-1879",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:47044e54-0f8a-55c8-bd6b-a9a6b88a0d8c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-1879 affects version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2013-3060",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e19ffe81-8b70-58b1-88be-713bf7fe4930",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-3060 affects version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2014-3576",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b8b06101-35c0-5ee9-afba-8e637c4777c4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3576 affects version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2014-3600",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:689e9cfa-6a96-5424-a09e-0b3015636c71",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3600 affects version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2014-3612",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2ff603ce-f553-576c-bd0c-d17c91528f28",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3612 affects version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2014-8110",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bd2d4c45-f557-55e4-9d93-a583374c3d52",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-8110 affects version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2015-1830",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7ea43bd2-6867-5cb9-bfd2-d26132a5b6e4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-1830 affects version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2015-3208",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b8e8db5e-985d-50e2-ad33-8a35d94328b4",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2015-3208 is a false positive for org.apache.activemq.tooling:activemq-memtest-maven-plugin 6.1.6-tuxcare.1."
      }
    },
    {
      "id": "CVE-2015-5254",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4972aa97-8c15-558a-b917-406753359b09",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5254 affects version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2015-6524",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:36faee12-aaa7-52ab-a4b7-137ab5d89936",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6524 affects version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2015-7559",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e9ea8934-f117-55d2-8c39-44324e0bc235",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7559 affects version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2016-0734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:577b2f27-fa46-529b-b2c8-bd817b3f5922",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0734 affects version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2016-0782",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:23b7c341-8f26-5493-998b-b6f6628c782e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0782 affects version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2016-3088",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4730ce8d-4e9b-5a67-96c2-415d0c65ec93",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3088 affects version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2016-6810",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9dda4eba-1883-5fd3-b63d-73b6d91bcab6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6810 affects version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2018-11775",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f973ce56-df5c-5cdc-b17c-922b011e1d4b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11775 affects version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2019-0222",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:63677f48-5db1-5c14-b56f-bb585d3cd305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0222 affects version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2023-46604",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:27ba15f5-8260-5826-8a86-cb0a3d3f0c2e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46604 affects version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2025-27533",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a25bda8d-7ada-581c-8d56-3c7dc9efc9a5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27533 affects version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-33227",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d74e618e-32bf-529e-b6c9-c0509b12518a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33227 affects version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-34197",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:534fdaf1-487b-56f5-b072-04d6527f61d4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34197 is fixed in version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-39304",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3dcb96f7-74b2-5020-b33f-f1aee1bcbfc1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39304 affects version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-40466",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cac16788-4f2f-5697-a3f0-3f5585dcd790",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40466 is fixed in version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-41043",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c095c64f-cccb-51c8-aa6a-ff19b77846bf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41043 affects version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-41044",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:32ffe146-7431-5999-9994-661f0c801bce",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41044 affects version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-42588",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9d7737a9-90bb-51da-be3a-d59bdf869365",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42588 affects version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-45505",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d63f3551-6c0b-5006-a119-86627ecffc53",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45505 affects version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-49270",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a5d08b6c-9438-5eb5-ae6c-df927823a841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49270 affects version 6.1.6-tuxcare.1 of org.apache.activemq.tooling:activemq-memtest-maven-plugin."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq.tooling/activemq-memtest-maven-plugin@6.1.6-tuxcare.1"
    }
  ]
}