{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c43e68c3-5742-54ce-9e29-f7bd5cf987bc",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "activemq-perf-maven-plugin",
      "purl": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2",
      "type": "library",
      "group": "org.apache.activemq.tooling",
      "bom-ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2",
      "version": "6.1.8-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "activemq-perf-maven-plugin",
            "purl": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8",
            "type": "library",
            "group": "org.apache.activemq.tooling",
            "version": "6.1.8"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2013-1879",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8a17b429-0495-56dd-8853-6296e81f694f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-1879 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2013-3060",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:cd8774fb-89fb-516c-8c00-0e6b4bc84d9c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-3060 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2014-3576",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:56d03ff5-02e5-5b20-a415-345ff7fb30d5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3576 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2014-3600",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f06c3e56-1376-56d1-bae2-4c49f24c0fc2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3600 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2014-3612",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2c349c7e-ae10-5dc1-947c-6a70921a6179",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3612 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2014-8110",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:766eb354-7b0c-5800-8dd2-d63fe85f17cf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-8110 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2015-1830",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:df3d2e50-5a1e-5439-a6e0-b0961c8b7f51",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-1830 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2015-3208",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d58a5089-354f-5e8b-8f4b-f491a9e6509a",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2015-3208 is a false positive for org.apache.activemq.tooling:activemq-perf-maven-plugin 6.1.8-tuxcare.2."
      }
    },
    {
      "id": "CVE-2015-5254",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:850f24c3-c122-5383-a98e-ea419c5b0ecb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5254 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2015-6524",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f575768c-88ce-56a8-8fdf-533311220c03",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6524 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2015-7559",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7d617427-4b33-54b1-a87c-1d38cce0be76",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7559 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2016-0734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7f824641-a39a-5c3f-8aa8-5e97bdf29e40",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0734 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2016-0782",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b6257601-6f38-5fae-8666-337e138ad228",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0782 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2016-3088",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f654088d-3606-50f2-8a08-61a55d33aa28",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3088 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2016-6810",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:18c77e82-179c-518b-9ef1-a5aebbcac425",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6810 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2018-11775",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:87722cd4-7051-5506-b058-658695a68938",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11775 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2019-0222",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:716df20a-6143-57be-a050-1c531e207bb7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0222 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2023-46604",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:da85fadb-3d87-5f32-b4d2-935d1200bc5d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46604 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2025-27533",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9a1c9043-8d07-5b9a-97ca-9e16642a119c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27533 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-33227",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:44200834-ac17-5278-89e0-9d058a9a041f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33227 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-34197",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:328a15cf-052d-581c-a945-6e1b834e5786",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34197 is fixed in version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-39304",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:adff6385-a7f2-5c5f-9621-7a6d24db7f05",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39304 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-40466",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:84245e6a-06b6-50cc-a844-3c185af2f04a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40466 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-41043",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d2b7fd9a-cc22-520c-8189-b6938bf1cf69",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41043 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-41044",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2375124f-caae-561a-b5c5-c1f86d69c3ed",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41044 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-42588",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a49114c9-1fb9-5d82-87dd-dd5f650cdb88",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42588 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-45505",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7d77140c-0a50-5963-9166-3468db0e176c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45505 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    },
    {
      "id": "CVE-2026-49270",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:55969cef-05cd-5593-817c-d9a95f60e089",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49270 affects version 6.1.8-tuxcare.2 of org.apache.activemq.tooling:activemq-perf-maven-plugin."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq.tooling/activemq-perf-maven-plugin@6.1.8-tuxcare.2"
    }
  ]
}