{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:3b7d68be-1b9e-52a8-8d0d-e136aa1b1d00",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "activemq-mqtt",
      "purl": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2",
      "type": "library",
      "group": "org.apache.activemq",
      "bom-ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2",
      "version": "6.1.6-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "activemq-mqtt",
            "purl": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6",
            "type": "library",
            "group": "org.apache.activemq",
            "version": "6.1.6"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2013-1879",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d24aa9b5-f8a7-57a0-a47c-b57942e32273",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-1879 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2013-3060",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9e9fd450-8f8e-5b6a-8e4d-bd4c92be5aa1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-3060 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2014-3576",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:04956642-13b2-5cfa-a03a-47827bd1221e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3576 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2014-3600",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:25b55709-ded6-58c6-a3de-7107a0f29eab",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3600 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2014-3612",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c792452b-c06d-5897-8ef4-d928cc034788",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3612 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2014-8110",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bbeaf3fd-dd35-5015-8c57-1f86ad541088",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-8110 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2015-1830",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:60260540-b70c-5567-b2a4-ecaae13742d5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-1830 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2015-3208",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:02509bd5-7e27-5ec2-b7ed-589c10128c6c",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2015-3208 is a false positive for org.apache.activemq:activemq-mqtt 6.1.6-tuxcare.2."
      }
    },
    {
      "id": "CVE-2015-5254",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5eb964ca-727c-553d-b9f5-1b82993e069d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5254 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2015-6524",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:92ae653f-72eb-5087-a680-e0298c15da9d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6524 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2015-7559",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:264bed77-35a1-5906-b61e-978bad296a16",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7559 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2016-0734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e4f25266-45ab-5596-851a-053300f535ea",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0734 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2016-0782",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:957ccfdd-95ba-5784-8665-66e14487102d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0782 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2016-3088",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:22ff202b-e9f1-5104-9fc8-6ac1cacb5843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3088 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2016-6810",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:586a35ee-2a56-5242-9ca4-b051e3db7041",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6810 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2018-11775",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e43954a1-2c80-56cd-a674-09be219d7722",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11775 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2019-0222",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8e64b233-3190-5ba4-b19e-34a8c591bac1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0222 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2023-46604",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6f493b4d-3417-5473-9062-f078b2a22fbd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46604 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2025-27533",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bbc680d3-e9da-5df6-990a-b4cf3c8a6ed9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27533 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2025-66168",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:49e03a62-dc30-5bde-b2b0-7b27b862a68a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66168 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-33227",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:79429dfb-0213-5581-a0cc-0586c017f2d5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33227 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-34197",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:47841186-6703-541b-8053-6ce33770a182",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34197 is fixed in version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-39304",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:01ec68a7-d2b3-537b-9cb1-68bdfdcf94fd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39304 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-40046",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4c35fba8-b4b0-5062-9731-41dc884a652e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40046 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-40466",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:45db7c57-d5b4-5853-a997-176c9a8e9039",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40466 is fixed in version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-41043",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4cec09a8-2cf0-5025-bed4-4caffe0f7246",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41043 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-41044",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:164cccd6-6133-5bf7-b2c6-4975ee7f3f38",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41044 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-42588",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0808318d-8075-50bf-a83b-90f5d27d2ad4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42588 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-45505",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:44cfb4f6-a30a-5e93-8661-658dacb2865e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45505 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-49270",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:61c20814-b61a-5acd-9f8a-0b999558c29a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49270 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-50734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f1f85770-f5c4-5198-8bce-9bffddc7576d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50734 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-53917",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:241589ee-4313-5dab-847c-2f1ccf516c08",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-53917 is fixed in version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-74761",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:025c4768-5075-5980-a079-5f307af3c598",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-74761 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.2"
    }
  ]
}