{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e8d8e6fc-8009-535b-b2e7-b78d0adde836",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "activemq-shiro",
      "purl": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1",
      "type": "library",
      "group": "org.apache.activemq",
      "bom-ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1",
      "version": "6.1.6-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "activemq-shiro",
            "purl": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6",
            "type": "library",
            "group": "org.apache.activemq",
            "version": "6.1.6"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2013-1879",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:385526ea-d6dc-562c-a6ee-64fa3dd3a6ab",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-1879 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2013-3060",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:066bbd1c-845e-5857-a6e2-bb533b13f772",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-3060 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2014-3576",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3994b13c-aac2-53ba-94a2-e997336b2243",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3576 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2014-3600",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a6f34c43-927b-5f9b-90b2-f4bb65bbb539",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3600 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2014-3612",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c12f291a-e51c-5555-a107-b5f62e07bfe0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3612 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2014-8110",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3e264557-859f-59a9-8ec9-1c7e9ff46583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-8110 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2015-1830",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:49e90429-3590-5ed5-852a-0beef09e4826",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-1830 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2015-3208",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:51d23fc8-3153-5566-9aea-8512ac6f8845",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2015-3208 is a false positive for org.apache.activemq:activemq-shiro 6.1.6-tuxcare.1."
      }
    },
    {
      "id": "CVE-2015-5254",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4da9fceb-3762-544a-9e6c-b0fe998da53c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5254 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2015-6524",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7548b98b-3c42-503d-b7d6-d398ae6d267c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6524 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2015-7559",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9ef61d66-6edf-5513-b59b-a93ac90297ba",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7559 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2016-0734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:38701671-9e00-5d07-a79b-8c6ac1c513d9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0734 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2016-0782",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:32174601-36a2-5a6c-b313-d3d2babc9fea",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0782 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2016-3088",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:70888364-18ef-589d-a441-a2df348c8e0f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3088 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2016-6810",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:204ed31f-041f-5a16-ac0b-1107cbd87214",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6810 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2018-11775",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dbd3bb12-3c14-5075-99f0-01cfb9e857fe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11775 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2019-0222",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3d5d01c5-d6ee-582d-939d-18a03e91dbd1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0222 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2023-46604",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9ea93b74-ff9a-5c59-8e63-1bb7455da850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46604 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2025-27533",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d1657191-9e3c-53d2-97d3-2e84c98b7e9c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27533 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2026-33227",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aecedaff-276f-56f0-85ea-9f05a0a630ce",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33227 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2026-34197",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:113f3bf0-a295-5301-95b5-4dfa373df803",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34197 is fixed in version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2026-39304",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aca03b5b-5de9-55ad-a9c1-306c5f168013",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39304 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2026-40466",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d0552259-3058-5a0f-8cee-21bc7431fade",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40466 is fixed in version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2026-41043",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f3e76f33-1d13-5bb6-9d5a-0ebfafe3d847",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41043 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2026-41044",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5cbff93c-7db9-5bf6-8df8-a9be687af762",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41044 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2026-42588",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e4fe5616-5baf-5831-889c-bf2e51e02374",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42588 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2026-45505",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c566c5b4-2a47-581a-97c6-c4402f89658f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45505 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2026-49270",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f1e100a6-ac6a-50b2-bfd7-8233d9fbe050",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49270 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-shiro."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.1"
    }
  ]
}