{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:cc0235b1-9e70-57db-bc9b-585b7db0b0d5",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "activemq-perf-maven-plugin",
      "purl": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2",
      "type": "library",
      "group": "org.apache.activemq.tooling",
      "bom-ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2",
      "version": "6.1.6-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "activemq-perf-maven-plugin",
            "purl": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6",
            "type": "library",
            "group": "org.apache.activemq.tooling",
            "version": "6.1.6"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2013-1879",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:59643af3-879d-582f-b316-88708e46b6bd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-1879 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2013-3060",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e5d48cc9-3d88-559d-b85a-52302febd0c2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-3060 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2014-3576",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c00f5294-0aed-5918-b658-4ee84ba6c567",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3576 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2014-3600",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1ccf1e2e-90f6-56dd-8a44-200962d6f111",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3600 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2014-3612",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f7be170d-04ef-5b43-a64a-acaa2caacacb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3612 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2014-8110",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9c5b9908-26f7-5ac9-a9de-d23730d34bf2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-8110 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2015-1830",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:18e4d7b5-23df-5262-b636-0ee1dd588b4b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-1830 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2015-3208",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bc9f0d6a-34af-5adb-8efe-aef659e15cb5",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2015-3208 is a false positive for org.apache.activemq.tooling:activemq-perf-maven-plugin 6.1.6-tuxcare.2."
      }
    },
    {
      "id": "CVE-2015-5254",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6b2f3e9a-faf0-560e-9b5d-2cc8e02f7559",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5254 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2015-6524",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:41180011-c959-53ff-93cc-ecce0889fa37",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6524 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2015-7559",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:132f95ec-b5a8-5045-9c54-858471b1fbe2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7559 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2016-0734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e72861b1-0e0e-522a-93a8-60dab0df9d27",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0734 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2016-0782",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e86c6fab-40dd-58b8-a38b-28e162c09b26",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0782 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2016-3088",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a4a5bcfe-55bd-5aa8-abda-4404ad7e5d0d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3088 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2016-6810",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e86d340e-a509-5ded-997e-c035e6af8bd6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6810 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2018-11775",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:16eb96c4-dc42-5937-a23b-573d80402522",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11775 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2019-0222",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:baa603d2-161f-533a-8a74-62e6a5d9f72d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0222 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2023-46604",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e8025ad4-e11d-5ee4-8d6a-b49fe7bafb96",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46604 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2025-27533",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8c55446b-dd57-5934-88f3-302686d09c12",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27533 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-33227",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e914e80d-a329-5efc-982d-4aec1c8c69e5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33227 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-34197",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7ccba03b-143c-5e7e-b649-0374b63e4f92",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34197 is fixed in version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-39304",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d45b6274-b329-588f-86ad-1c4550fc9587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39304 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-40466",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7d838813-aa53-55a2-88d6-5f4b0a7de8cb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40466 is fixed in version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-41043",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:663c6997-7843-5919-8a9c-b39bee00d593",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41043 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-41044",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:34375430-956f-5847-b977-89cb4727f4c9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41044 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-42588",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9a942eea-72e3-5aa0-9ca7-a5de9219b345",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42588 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-45505",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:71bb52fb-bb4c-5506-9fb7-eda0afc8dbaa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45505 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-49270",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:54485237-aa86-5e6b-9786-ba647849bfe2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49270 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.2"
    }
  ]
}