{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:100237a4-04ad-52f3-8add-a98ab89a09f1",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "activemq-mqtt",
      "purl": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2",
      "type": "library",
      "group": "org.apache.activemq",
      "bom-ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2",
      "version": "6.1.8-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "activemq-mqtt",
            "purl": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8",
            "type": "library",
            "group": "org.apache.activemq",
            "version": "6.1.8"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2013-1879",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:565f10af-4c25-5037-abde-9caf498dddcc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-1879 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2013-3060",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:09575ee5-b93f-5014-a7ba-410d724586c8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-3060 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2014-3576",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fb89f306-fe1a-5b4c-bf37-d5ad4d23920b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3576 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2014-3600",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2e77848c-5bd9-50a6-84c3-95c9613c61d9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3600 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2014-3612",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c3f35a6b-7760-5ab8-b9d9-859f85ceea7b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3612 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2014-8110",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2ed5dea6-3f06-5cbe-a5ff-65c0cd963ecf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-8110 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2015-1830",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:de013c03-f511-5c4d-962e-30cc3c09bfc4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-1830 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2015-3208",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:41dbf768-a99c-5274-a94a-0757d048120e",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2015-3208 is a false positive for org.apache.activemq:activemq-mqtt 6.1.8-tuxcare.2."
      }
    },
    {
      "id": "CVE-2015-5254",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:24b524ad-7593-590e-b50b-e22a81660272",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5254 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2015-6524",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a7e0e305-c284-570a-8d4c-727c5326c403",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6524 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2015-7559",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4e384ca6-b741-54f0-bc9f-6d31b740733d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7559 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2016-0734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:793d0654-1009-57c6-830e-a30894690845",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0734 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2016-0782",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a1f79d05-d233-5e8e-97f9-8eb6f9923d51",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0782 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2016-3088",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2866a02f-ff96-5e51-839e-9d674671699c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3088 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2016-6810",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4a1df971-335b-5d9b-8035-12f76cbb0270",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6810 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2018-11775",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3fadc7f1-c12a-5eb4-8c38-5763a5d90e6c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11775 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2019-0222",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:12e0730f-f486-54a6-988c-d2820caabe6d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0222 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2023-46604",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:aae2b726-a805-59a3-a581-3bedf9991323",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46604 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2025-27533",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b27e5854-08a1-53b3-a75f-ac3facb62ded",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27533 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2025-66168",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:16beecd1-775f-5f0d-8db6-566ccddbf4b7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66168 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-33227",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fd7be717-f02f-5162-ae2c-73293a0f2138",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33227 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-34197",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d2da40d5-544a-51be-bfd6-4231a16df9f2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34197 is fixed in version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-39304",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2384d267-3af9-5aad-8624-67932ec932e9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39304 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-40046",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d88ea096-af26-5b0f-a579-2712ebccfeeb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40046 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-40466",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ba89926f-dbc2-5d34-a935-858773c298c2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40466 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-41043",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:00611409-0aa2-5fe4-bdfb-852a069c5083",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41043 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-41044",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f710902d-3481-5748-bbf0-77f8c68292f6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41044 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-42588",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a90e544f-f066-5717-9826-39a5a6364aab",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42588 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-45505",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:868c953d-cb76-5f35-9aac-69f80d36ece1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45505 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-49270",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:238d9616-b9e4-5317-b10a-876ace62c862",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49270 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-49432",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3005e16d-2720-5df2-add3-e84a25052ba9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49432 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-49434",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3a0d288a-f5cc-5d3e-b83c-e371892af59e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49434 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-49877",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d13f4f11-e1e3-5ef7-a276-69a95cfd9e4e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49877 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-50734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:80266042-f95f-579f-a9ec-304c87336409",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50734 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-52760",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dc99733d-5bc3-586a-9ed6-8e69a66f7b53",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52760 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-53916",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f72eb15e-3d39-58e9-bcb3-50fc2b8f68c9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53916 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-53917",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:408ab457-f7fc-509f-8514-6eee03f4d1b3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53917 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-54475",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fdb8801e-e607-594e-bf52-f80535a3f5d4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54475 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-59878",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:91f80d37-5956-5274-9c04-2a314744bbb7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59878 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-61487",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e216fbac-0764-5aa4-8bf0-938c00add032",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-61487 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    },
    {
      "id": "CVE-2026-74761",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a2a112eb-67ff-5c57-a54d-cc3a365741d6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-74761 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-mqtt."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq/activemq-mqtt@6.1.8-tuxcare.2"
    }
  ]
}