{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4ca24d7e-8f6b-536a-ad4b-3e5db7dd8de0",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "activemq-runtime-config",
      "purl": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3",
      "type": "library",
      "group": "org.apache.activemq",
      "bom-ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3",
      "version": "6.1.6-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "activemq-runtime-config",
            "purl": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6",
            "type": "library",
            "group": "org.apache.activemq",
            "version": "6.1.6"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2013-1879",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:223cad25-998a-5d7c-bf29-2a68fb45e185",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-1879 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2013-3060",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8a690691-81d5-5128-bbd3-584a25c02f3d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-3060 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2014-3576",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1905df3f-1e15-5f00-aaff-4a68efef1db6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3576 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2014-3600",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8b09ee6c-9058-5bef-8f44-b27cfd9c30d8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3600 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2014-3612",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1815e303-6c76-5b24-9820-b23627513cb3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3612 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2014-8110",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c130f139-65d2-5360-b737-1f900d2437bd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-8110 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2015-1830",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:42cce2c0-3375-5eb1-b1c6-a6d8ea15d78d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-1830 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2015-3208",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:61c60006-ac49-5e8b-9f0f-d91fbfcd46e7",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2015-3208 is a false positive for org.apache.activemq:activemq-runtime-config 6.1.6-tuxcare.3."
      }
    },
    {
      "id": "CVE-2015-5254",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:524dca87-7e95-5db6-973f-b783525e0458",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5254 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2015-6524",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6eb15aa1-e3cf-52d9-acc9-729dcd0cb0aa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6524 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2015-7559",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:cd0562fa-e495-563a-892a-3b8545083ab9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7559 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2016-0734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:428056a9-d1d5-5109-9a35-fe90cd021890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0734 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2016-0782",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7cf1b67f-bb0f-52dd-b27c-ba3648f76030",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0782 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2016-3088",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:aba9611f-aa3b-5edd-84e9-c670229b65f6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3088 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2016-6810",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1f41b9f1-740c-5891-a48c-7c197d5422eb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6810 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2018-11775",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:88349638-5749-5bf8-86e7-96082a418834",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11775 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2019-0222",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9de4cea2-8a0d-570f-a649-f0319bbe63f9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0222 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2023-46604",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7be68bad-b39c-5b5d-8325-1e12e0903f56",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46604 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2025-27533",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7baf6f16-b340-5dc6-8e1c-d55e0f724d56",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27533 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2026-33227",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1f76c805-8057-5103-9741-a63316ee8ceb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33227 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2026-34197",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:31488c1b-8bbf-547c-bf2c-d9fa3d879449",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34197 is fixed in version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2026-39304",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ab83ff9f-b7ab-5776-bcf8-8385643c3c08",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39304 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2026-40466",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c858e1fb-9152-5b2b-b8f3-8f94cf2b107e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40466 is fixed in version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2026-41043",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:93fd5b9d-181a-5429-9d57-3e734696b467",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41043 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2026-41044",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:03a4bba0-5400-5b34-b73a-15580da7fbab",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41044 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2026-42588",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:89aa6fcd-a2c4-5cb3-bedc-904aa8d21617",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42588 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2026-45505",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9d48a62e-9bcf-5d5f-bdb9-4ef10ac370ff",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45505 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2026-49270",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:fb445cb6-9e45-561d-a464-98f0e29749eb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49270 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-runtime-config."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.3"
    }
  ]
}