{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:0d516322-23cc-5601-8bba-fb04bde5a2ac",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "activemq-perf-maven-plugin",
      "purl": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3",
      "type": "library",
      "group": "org.apache.activemq.tooling",
      "bom-ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3",
      "version": "6.1.6-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "activemq-perf-maven-plugin",
            "purl": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6",
            "type": "library",
            "group": "org.apache.activemq.tooling",
            "version": "6.1.6"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2013-1879",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:66867c5c-f392-5060-8c2e-905f26c3741f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-1879 affects version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2013-3060",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:77f7835e-6506-5aa7-bc87-3f2255391e27",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-3060 affects version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2014-3576",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3a9a73ff-aa29-5f47-8d12-35a088438bca",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3576 affects version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2014-3600",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3121fc8a-981f-5be3-8e47-7cf75a7140f9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3600 affects version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2014-3612",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1ecebdc0-aba1-59a2-89ca-850b2fc164fb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3612 affects version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2014-8110",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:bb0fa193-0289-5544-aa2b-2073f7f28d28",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-8110 affects version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2015-1830",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ec6af906-67ef-5940-a17c-4a0f589b8949",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-1830 affects version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2015-3208",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:522c3107-5565-5d28-8259-6d575e9d6aed",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2015-3208 is a false positive for org.apache.activemq.tooling:activemq-perf-maven-plugin 6.1.6-tuxcare.3."
      }
    },
    {
      "id": "CVE-2015-5254",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8ea6403f-685b-537e-aef4-ecbd9b2c7c17",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5254 affects version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2015-6524",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:11cc2fc1-1d6a-5946-ad47-7f9da0f6e15e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6524 affects version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2015-7559",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ff515df0-b115-5beb-98bb-7a53408a5397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7559 affects version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2016-0734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c4276518-3cf8-5d0e-b40a-f0ac2fadf81d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0734 affects version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2016-0782",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:86fcdd07-04a5-5f30-91ec-6f93362ed3f7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0782 affects version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2016-3088",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d3f4e5ed-bd7e-51d9-8220-c13e62ed5fbb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3088 affects version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2016-6810",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:fcabbbd3-5444-5ca6-8823-d8ae539c79a7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6810 affects version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2018-11775",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8662aaef-aa9c-5b17-bae1-88c873a444a0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11775 affects version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2019-0222",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:20511310-0c57-59f3-9141-8f28ff22fcc1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0222 affects version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2023-46604",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e08ac490-4b6b-58bd-8f43-34fcb73ccc49",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46604 affects version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2025-27533",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ce57bf21-f09c-5a5b-b351-86ae5f0a715b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27533 affects version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-33227",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3df3405f-3a49-565b-8dc9-ef54b241d72d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33227 affects version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-34197",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0ec58ba5-32e8-5097-ab40-a723a6a272e9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34197 is fixed in version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-39304",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:49feedda-0ea0-5482-8f10-839a41b1b9bb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39304 affects version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-40466",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5f766783-0547-5103-8507-b8f1af330d30",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40466 is fixed in version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-41043",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d81fbf98-4f29-56b2-af95-83c736561a95",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41043 affects version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-41044",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4f1c7c24-57d5-5134-bda8-8fa140dc5fdd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41044 affects version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-42588",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1ad8f8aa-dbe7-56d9-9da8-2a1c595918d5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42588 affects version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-45505",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:de50b2ee-5432-5b0f-b169-9cbd8b969e20",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45505 affects version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-49270",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7e569f97-8998-57b4-9039-af82dda365a0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49270 affects version 6.1.6-tuxcare.3 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.6-tuxcare.3"
    }
  ]
}