{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2b5397c3-64de-5373-a5d1-eecf8f5a8793",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "activemq-mqtt",
      "purl": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3",
      "type": "library",
      "group": "org.apache.activemq",
      "bom-ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3",
      "version": "6.1.6-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "activemq-mqtt",
            "purl": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6",
            "type": "library",
            "group": "org.apache.activemq",
            "version": "6.1.6"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2013-1879",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:36e2ef19-8911-5fbb-99c1-0ef00f4bc5c7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-1879 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2013-3060",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:67804ccd-2d8f-5d5e-8d2b-61c2f98fcd5b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-3060 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2014-3576",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c8e99050-4b75-5d82-8e9e-7ac23d826305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3576 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2014-3600",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3e1a2a71-2c71-5bed-bfe5-32423d5767e0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3600 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2014-3612",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:29e4e8aa-691c-56e6-b7a3-4392720d98aa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3612 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2014-8110",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0165ef4a-4716-5bac-9dec-ecafcc2f29db",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-8110 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2015-1830",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f3d4f810-6717-52f7-887b-9659953baae2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-1830 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2015-3208",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:bf84da10-d2ab-5195-82e5-e2b56263c8ff",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2015-3208 is a false positive for org.apache.activemq:activemq-mqtt 6.1.6-tuxcare.3."
      }
    },
    {
      "id": "CVE-2015-5254",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b7dd5966-2cf9-5ebb-91ff-5c7b6b77cfbd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5254 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2015-6524",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0f7d72dd-6fe5-5368-bbe6-5bb3f58d0e92",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6524 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2015-7559",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:612a174e-6cbf-5728-be83-ad364924ac24",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7559 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2016-0734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:10c693c6-2ada-5ebe-91c3-43b0d916f59a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0734 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2016-0782",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d12b31fb-504a-58b8-b705-bf59de5133cb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0782 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2016-3088",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2d55c564-9a96-5e2a-9928-b30cc28af642",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3088 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2016-6810",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1060b54b-a3d7-51d9-a29a-f80444ea1c7a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6810 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2018-11775",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:60258fcd-9542-510f-a964-034f1db49343",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11775 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2019-0222",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b2b8bd1a-0160-5239-b8db-82d0122754b4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0222 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2023-46604",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:43f7116a-8bb3-5e63-b6b2-27e1bea94af3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46604 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2025-27533",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:df011b8b-4869-51ba-a41e-730e17bc9ac4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27533 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2025-66168",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8bbcc5ea-5f27-5dde-9638-8f905f6a109f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66168 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-33227",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7823c2de-0b91-5afc-b80e-961178719fb8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33227 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-34197",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f7343c07-2a04-50d7-80bd-35d81ddd78b5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34197 is fixed in version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-39304",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:89865903-5d13-593a-827c-1e60fa9aecd3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39304 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-40046",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ab185934-cc8c-5851-a80b-e5bf48650083",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40046 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-40466",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1869858e-66cc-5dc4-b883-849f1dace95a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40466 is fixed in version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-41043",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d509ad90-bdb5-5ce1-8d6a-30ac1c4fdf56",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41043 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-41044",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2a697497-15de-5b76-b7b4-5f97e4bcb3a2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41044 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-42588",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:22f2f6c3-71a3-5420-811c-3e0d6c0ddc05",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42588 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-45505",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a379db66-cde0-5465-adfa-487bfee8b653",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45505 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-49270",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ff1314dc-e3e7-543e-a5c6-36cd9404fb69",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49270 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-49434",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3c8470cf-8c13-5e4b-9fca-e6af5243edd0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49434 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-50734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:54c302f5-8ba4-54ed-8698-6c0b9a63349a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50734 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-53917",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b6f39818-e09e-571b-92a2-17fe6ce46c84",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-53917 is fixed in version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-54475",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:06433ee7-4bb4-52fe-a3a8-132d67cceb09",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54475 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-61487",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:df627c10-be22-5928-885e-b9cb5c67bdb9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-61487 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-74761",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:440249de-43ec-553e-9f8a-79bf438d9288",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-74761 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-mqtt."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.6-tuxcare.3"
    }
  ]
}