{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:844183fc-2e64-5dba-8b7c-cdd0dccd5fe7",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "activemq-karaf",
      "purl": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3",
      "type": "library",
      "group": "org.apache.activemq",
      "bom-ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3",
      "version": "6.1.6-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "activemq-karaf",
            "purl": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6",
            "type": "library",
            "group": "org.apache.activemq",
            "version": "6.1.6"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2013-1879",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3b856e07-7d4e-5e9a-b694-f67c19769862",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-1879 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2013-3060",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9a74d138-a0c9-56da-9967-cbe415c64952",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-3060 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2014-3576",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e74c4794-5aab-571d-ab52-79864f12ca88",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3576 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2014-3600",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1b620f99-562c-5928-a0a5-d53872589482",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3600 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2014-3612",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ab526e88-1250-5f22-816c-3394ad0fda95",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3612 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2014-8110",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:624038a5-3452-5860-b4b4-54e08933d8a2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-8110 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2015-1830",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3e3467c9-0adc-51bb-a249-58fdd1246c39",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-1830 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2015-3208",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:88c612fa-4c80-5d48-9767-3c7011129cac",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2015-3208 is a false positive for org.apache.activemq:activemq-karaf 6.1.6-tuxcare.3."
      }
    },
    {
      "id": "CVE-2015-5254",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0d570cba-a331-5319-a14c-295516fa48a8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5254 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2015-6524",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0b363062-0901-5d19-833b-045502d88b46",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6524 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2015-7559",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:83f360f3-9752-5731-a869-ccbb8dccf3e5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7559 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2016-0734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:df033a16-7418-510e-aac2-6a3ba8013edf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0734 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2016-0782",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:bd70c1fc-635a-57cd-86cd-94e412c72d04",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0782 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2016-3088",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4b597fe5-d7de-534d-85e2-2f8d7b2feabb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3088 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2016-6810",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:43fde125-6f96-5cbe-8d75-5ea3c1bbe636",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6810 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2018-11775",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:38ac9ea8-6840-5093-a81e-4b60c294f95c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11775 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2019-0222",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2043db3c-dcd4-599c-a2d9-ae0ea57b02e6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0222 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2023-46604",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4cbad5c6-23d9-53ab-86a8-bfa62681dfec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46604 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2025-27533",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:bf397687-5fac-5efd-a710-7b0471cd716a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27533 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2025-66168",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6e3831ea-5fc1-52df-b09e-a6cb9ca3313b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66168 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2026-33227",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f5351d1d-51a7-5e7e-8917-bda02c34b523",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33227 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2026-34197",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:bfb43683-a2db-569b-9a00-e19fedd390a6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34197 is fixed in version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2026-39304",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2f103aba-b53b-55d6-999b-83c01b98c52d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39304 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2026-40046",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8be6728c-f214-5685-b8fd-8f5b4bbac4c7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40046 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2026-40466",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2a283b7a-bfb0-527b-b4dd-68d53fe52833",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40466 is fixed in version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2026-41043",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7fabe502-1432-5035-a804-61be275132e1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41043 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2026-41044",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6ea3e193-3a67-5aad-875e-5608dded7e17",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41044 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2026-42588",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:82233f26-5029-5d34-9790-2233da77b8b2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42588 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2026-45505",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:23924820-da6a-5e7b-8bbb-9fcc8e43edb4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45505 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    },
    {
      "id": "CVE-2026-49270",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:258de091-a73f-5f3a-bc80-de79bf8d9a3a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49270 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-karaf."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq/activemq-karaf@6.1.6-tuxcare.3"
    }
  ]
}