{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e0999ebe-02a7-5f27-ba82-08b28b7a59b8",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "activemq-openwire-legacy",
      "purl": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6-tuxcare.2",
      "type": "library",
      "group": "org.apache.activemq",
      "bom-ref": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6-tuxcare.2",
      "version": "6.1.6-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "activemq-openwire-legacy",
            "purl": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6",
            "type": "library",
            "group": "org.apache.activemq",
            "version": "6.1.6"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2013-1879",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d6b847cf-8cc2-5ebf-bd29-3a7a68598097",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-1879 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-openwire-legacy."
      }
    },
    {
      "id": "CVE-2013-3060",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c08e63b5-8b17-5501-b2ff-a924ebe0735f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-3060 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-openwire-legacy."
      }
    },
    {
      "id": "CVE-2014-3576",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1a8a0969-d95a-52f0-9292-1531d67fd9f8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3576 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-openwire-legacy."
      }
    },
    {
      "id": "CVE-2014-3600",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6ad505a6-a274-50a9-af3d-8f35569133e4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3600 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-openwire-legacy."
      }
    },
    {
      "id": "CVE-2014-8110",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:18bfc8ce-901a-55c0-ba15-1ddd02db4676",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-8110 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-openwire-legacy."
      }
    },
    {
      "id": "CVE-2015-1830",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7842212a-48b0-5b81-926c-f5fefff1dd4d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-1830 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-openwire-legacy."
      }
    },
    {
      "id": "CVE-2015-3208",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fb54d9a0-2c52-5fbf-af81-96517cc4b8e5",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2015-3208 is a false positive for org.apache.activemq:activemq-openwire-legacy 6.1.6-tuxcare.2."
      }
    },
    {
      "id": "CVE-2015-5254",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8ab7d60c-0d90-5837-b37e-1500f73543f1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5254 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-openwire-legacy."
      }
    },
    {
      "id": "CVE-2015-7559",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b2152562-91a3-5356-a495-8f05dd9fb91f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7559 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-openwire-legacy."
      }
    },
    {
      "id": "CVE-2016-0734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:732d1a8f-8123-516a-9696-ae6bb731c8ee",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0734 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-openwire-legacy."
      }
    },
    {
      "id": "CVE-2016-0782",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:649b3fd5-c9ad-54c1-84e7-4940ec782871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0782 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-openwire-legacy."
      }
    },
    {
      "id": "CVE-2016-3088",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c869909f-cb6b-5a8a-bbbd-e0429b8d7d64",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3088 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-openwire-legacy."
      }
    },
    {
      "id": "CVE-2016-6810",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:71c8b103-4bac-547c-aaf4-f7f330d9097c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6810 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-openwire-legacy."
      }
    },
    {
      "id": "CVE-2018-11775",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:16659107-ab5b-5c81-815e-c902fce1599f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11775 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-openwire-legacy."
      }
    },
    {
      "id": "CVE-2019-0222",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dc07c04d-95fa-5fe7-85f3-c3bdf8accbe7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0222 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-openwire-legacy."
      }
    },
    {
      "id": "CVE-2023-46604",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:adf164d8-8de7-500e-9e73-3688a89d2641",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46604 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-openwire-legacy."
      }
    },
    {
      "id": "CVE-2025-27533",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:61a7d0a7-4009-5b28-afae-d21b9e00bb16",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27533 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-openwire-legacy."
      }
    },
    {
      "id": "CVE-2026-33227",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d64ba9fa-2b17-5848-9e46-8bce3740c9ad",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33227 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-openwire-legacy."
      }
    },
    {
      "id": "CVE-2026-39304",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:11f0f1a6-8d44-5ece-8c4f-dcfccc6e1321",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39304 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-openwire-legacy."
      }
    },
    {
      "id": "CVE-2026-50734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:210f65da-9794-5199-8ff7-a174c6f6f436",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50734 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-openwire-legacy."
      }
    },
    {
      "id": "CVE-2026-53917",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:82c9a3a0-f414-5f46-9196-cbbb05157c1a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-53917 is fixed in version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-openwire-legacy."
      }
    },
    {
      "id": "CVE-2026-74761",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:28228d2c-fc50-5cc1-9230-ab678729b51b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-74761 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-openwire-legacy."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq/activemq-openwire-legacy@6.1.6-tuxcare.2"
    }
  ]
}