{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e89ba860-b439-527f-9ab9-918d018bf6a5",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "activemq-osgi",
      "purl": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2",
      "type": "library",
      "group": "org.apache.activemq",
      "bom-ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2",
      "version": "6.1.6-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "activemq-osgi",
            "purl": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6",
            "type": "library",
            "group": "org.apache.activemq",
            "version": "6.1.6"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2013-1879",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:455da70e-c4eb-581a-b19b-07ae6fa5f691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-1879 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2013-3060",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:556fc7d8-e6f6-533f-8529-4d92a8d8ede8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-3060 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2014-3576",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4915e984-8eb9-584f-8b69-438252ab6fbc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3576 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2014-3600",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ef5667e3-6db6-5c1f-a112-d84b36c13ca7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3600 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2014-3612",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c0100dc4-b361-52f7-a2a4-8ab0c624729f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3612 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2014-8110",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ca2a9e3b-838a-5f95-b0b5-001ac73def37",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-8110 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2015-1830",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f6241b31-d4f6-57a0-a4cc-ede8f38586a8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-1830 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2015-3208",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a256a272-ec64-525f-994d-3c0d6ad36542",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2015-3208 is a false positive for org.apache.activemq:activemq-osgi 6.1.6-tuxcare.2."
      }
    },
    {
      "id": "CVE-2015-5254",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ef0a388d-f09a-5da0-86ba-a01a9792a5b1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5254 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2015-6524",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c3f7bad5-53c7-525d-939c-c14575da077b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6524 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2015-7559",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1bb1f52d-c1b2-54d0-a66c-52e2c3d9c211",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7559 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2016-0734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:914e7f5a-0c56-55c2-ad5f-2c9f6bd45941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0734 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2016-0782",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e4335115-5cfb-5dd6-a053-4ba03d9626f4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0782 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2016-3088",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6d7d9d03-128c-5156-bd78-b6f5037ce33c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3088 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2016-6810",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3850cec5-fbdf-5ce3-a1d2-663329deb038",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6810 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2018-11775",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:938a740f-2162-5331-9775-e39d3d54ffae",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11775 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2019-0222",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:78a7e67d-da75-533e-bacc-b3a5c5c32054",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0222 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2023-46604",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c73d82e7-2d71-5f44-b9d7-7bd4485050b2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46604 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2025-27533",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2e8dfd18-bfe9-58cb-85aa-7a21da91d756",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27533 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2025-66168",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5ea51f78-1b82-5f37-a905-b7370516fadf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66168 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2026-33227",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:23afb887-6289-5f25-a5a3-c523eda91ec8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33227 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2026-34197",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:64a1b12b-64af-5df8-b2ef-41e5f9083768",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34197 is fixed in version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2026-39304",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5616bbbc-0e81-5017-8217-86a8bcb2d849",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39304 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2026-40046",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5647c80f-1bf7-56c4-a086-1cce9ebc2446",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40046 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2026-40466",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8d6e6bcc-8523-5fbc-943f-6d2629f9c53e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40466 is fixed in version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2026-41043",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:44fe43e3-4e94-5002-a210-f25e8c97bcf5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41043 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2026-41044",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:62416852-0ed7-5a7f-9936-33383b89a7f7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41044 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2026-42253",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1157c694-144a-5a56-aa41-63ddcd5ebfef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42253 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2026-42588",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4235f4f9-e248-5970-ad60-9a041db5a566",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42588 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2026-45505",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b723cac7-a6b6-5d4d-a697-3c9c40f50361",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45505 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2026-49270",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:002f23b7-0b38-5683-a9fc-6562941980d5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49270 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2026-49432",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a379d9af-bad8-56fb-9a4d-802cdaef0b87",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49432 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2026-49434",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1a456184-8afa-5607-999a-c4db09fbaede",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49434 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2026-50734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ad751d62-c3e9-5ac4-a84a-7e03a30fc5b1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50734 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2026-53916",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e6ccf819-57cc-593a-8cea-b1b0d768ab02",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53916 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2026-53917",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1300377d-db43-5792-94b1-acff24bc228f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-53917 is fixed in version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2026-54475",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2a5ab268-a387-559f-ae8e-92f77eb5fbf0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54475 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2026-59878",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:701ea04e-069e-5523-a0a6-68e768c19dcd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59878 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2026-61487",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:821a8b15-2377-5b44-bce1-defe8c0f6e59",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-61487 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    },
    {
      "id": "CVE-2026-74761",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2485685f-9221-5043-80ac-6dd43f9307c5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-74761 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-osgi."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq/activemq-osgi@6.1.6-tuxcare.2"
    }
  ]
}