{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:534b4178-9df4-58d4-8039-b2e82d8e8e41",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "activemq-log4j-appender",
      "purl": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2",
      "type": "library",
      "group": "org.apache.activemq",
      "bom-ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2",
      "version": "6.1.8-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "activemq-log4j-appender",
            "purl": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8",
            "type": "library",
            "group": "org.apache.activemq",
            "version": "6.1.8"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2013-1879",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f9769931-d6b0-5609-82ea-ebb26e1f4c0f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-1879 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2013-3060",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:368ff548-382b-521a-a287-1d95f2be356f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-3060 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2014-3576",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3f71b6dc-5247-5ed2-b23c-a47367fc4a28",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3576 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2014-3600",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:33dd6868-99e4-5f01-9df9-d23d83af160b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3600 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2014-8110",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0b0722fd-6301-5308-9849-d39119f18c43",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-8110 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2015-1830",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:cf37f1ca-96b3-53d2-91d8-6b6fd28e1a34",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-1830 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2015-3208",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e036713c-563b-5bb3-982d-cd95fb635f62",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2015-3208 is a false positive for org.apache.activemq:activemq-log4j-appender 6.1.8-tuxcare.2."
      }
    },
    {
      "id": "CVE-2015-5254",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:128f0d63-3b59-549f-adf1-f14d33d4d9e7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5254 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2015-7559",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4dab46cf-75c3-571b-95e4-11c0e2e6a209",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7559 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2016-0734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d333eefc-c477-5b8a-a319-0cf86ca2bf67",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0734 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2016-0782",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2ddddf9f-9244-5fde-82b5-bf3645da4381",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0782 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2016-3088",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:65748769-ccb2-520d-8ab1-6bf7f0aa75c7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3088 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2016-6810",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:eeef31e1-dff2-539a-9d78-3a5b418efa37",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6810 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2018-11775",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e411a184-de76-5ec0-b4f5-e5bcf8ff2fe9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11775 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2019-0222",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f8bec1a4-583b-5b8d-b16d-6d7be6469577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0222 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2023-46604",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:caae1cd3-6def-5976-be0c-8a513affbcc0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46604 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2025-27533",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1bfdf0a5-61a7-558a-a9c0-0e85270a7e15",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27533 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2026-33227",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:68aa21da-0a96-5f31-bf61-de0549b520ca",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33227 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2026-39304",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:21ac9f1f-0807-5f51-8172-e4a02773f9b7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39304 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2026-49432",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:074f5952-af01-580f-8300-c0fb57197625",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49432 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2026-49434",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b90fca76-2071-5dd6-86ae-87983de9023a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49434 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2026-49877",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b9f0e784-f25c-50ee-9b46-d4d2534f5c44",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49877 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2026-50734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:61a900b2-b4c8-5a59-a2b8-4ed59775dea5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50734 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2026-52760",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:97a275d4-67a2-536e-a619-0827eabf7f80",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52760 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2026-53916",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:976040cf-910f-5eb9-9676-92fc6f4e1a22",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53916 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2026-53917",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:32d67d6c-3e20-5326-a79c-fcfbaec4b16c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53917 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2026-54475",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f4bd3811-ed3d-51a1-858f-9c86e39db556",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54475 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2026-59878",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c1ad98d6-592d-54ef-9d2d-a8ee1be513e2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59878 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2026-61487",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5f55f2d3-2ff1-5a2d-b5a8-6f3f2366b4fe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-61487 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    },
    {
      "id": "CVE-2026-74761",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7d6dbd35-773c-5308-8362-ee086e79a141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-74761 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-log4j-appender."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq/activemq-log4j-appender@6.1.8-tuxcare.2"
    }
  ]
}