{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5fb695fe-6ec1-5301-9ab4-7a0e6b94b323",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "activemq-http",
      "purl": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1",
      "type": "library",
      "group": "org.apache.activemq",
      "bom-ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1",
      "version": "6.1.6-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "activemq-http",
            "purl": "pkg:maven/org.apache.activemq/activemq-http@6.1.6",
            "type": "library",
            "group": "org.apache.activemq",
            "version": "6.1.6"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2013-1879",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:960fc7aa-60aa-59ef-a737-d942fbc9241b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-1879 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2013-3060",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b9477785-5181-5eb3-bd8a-0bfd1eb92309",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-3060 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2014-3576",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2c691b90-6277-5bde-acbc-80ac74df7f6c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3576 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2014-3600",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f742ff45-7206-5025-8332-98af8e7f1d60",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3600 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2014-3612",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2d6d88f6-5ef8-5df8-b437-4621889fcf5a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3612 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2014-8110",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aea7d551-7f52-566f-be76-6c0d42bd130c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-8110 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2015-1830",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dcaffc2a-176a-577c-a373-a76f68771ef9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-1830 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2015-3208",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e2e3ee28-9d4a-57c3-b511-22a131d4035b",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2015-3208 is a false positive for org.apache.activemq:activemq-http 6.1.6-tuxcare.1."
      }
    },
    {
      "id": "CVE-2015-5254",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:458550d2-daaa-551e-896e-e37d9ac8ef99",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5254 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2015-6524",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a4c2266e-7cee-5f0e-aee6-d87715a93887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6524 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2015-7559",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a6739143-08d8-55ff-8841-bdee8ae4dceb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7559 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2016-0734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a06539fb-b738-5158-b06b-3e5c643072bb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0734 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2016-0782",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3bd5c648-4cdd-517b-aad9-13d96825e478",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0782 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2016-3088",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d592de18-c4cf-5739-9f0c-fdb154b361f5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3088 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2016-6810",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:da01549f-68e8-5fc1-a60d-64901bc671bd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6810 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2018-11775",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:344bb0d6-8ffe-5b36-a79e-db171d58fd27",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11775 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2019-0222",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b5a80af1-8d6a-531a-acd1-20ed9e10be2e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0222 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2023-46604",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0bac69a9-574d-5636-8ecf-b3451c916d2e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46604 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2025-27533",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0766a1ab-fc21-5722-9c44-2f903eda297d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27533 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2025-66168",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:894761c9-37d7-5d48-915a-86a2fcf83a87",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66168 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2026-33227",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5476075b-93f1-5612-bace-b9f16f443798",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33227 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2026-34197",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:de77634a-b18a-5bf8-ac03-7e1bb73cc10d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34197 is fixed in version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2026-39304",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d75899df-87a9-587b-85c3-51919c56b3cf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39304 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2026-40046",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b3e86095-e9f5-55b4-b06c-3b4466c0ce91",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40046 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2026-40466",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0478982a-e926-5718-adf9-26d921e33dbb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40466 is fixed in version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2026-41043",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:63aca469-58a9-54dd-9852-ed5a7eaa3d92",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41043 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2026-41044",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ea842370-4517-56c3-8173-38ac65e39ace",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41044 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2026-42588",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2571ad67-edf4-53b6-bac6-a332d77f8a0a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42588 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2026-45505",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:53517f21-3cc3-594e-947e-c81ca3214aba",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45505 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    },
    {
      "id": "CVE-2026-49270",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b198bdde-3b42-5bff-aff9-866b284d8b55",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49270 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-http."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq/activemq-http@6.1.6-tuxcare.1"
    }
  ]
}