{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a03fec09-ea16-5a7b-aea3-0f3e4628a157",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "activemq-shiro",
      "purl": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2",
      "type": "library",
      "group": "org.apache.activemq",
      "bom-ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2",
      "version": "6.1.6-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "activemq-shiro",
            "purl": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6",
            "type": "library",
            "group": "org.apache.activemq",
            "version": "6.1.6"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2013-1879",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7abc8611-9e1a-53c2-a111-046dff9e0be4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-1879 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2013-3060",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:659a81a8-7290-55f4-b8c4-80d858584efa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-3060 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2014-3576",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c59215ac-bc7c-5a66-841d-cdbee99d405b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3576 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2014-3600",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:90a728ce-abca-5468-9eae-d333140cac2f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3600 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2014-3612",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d597dab6-54a4-5226-9ae3-422472babe70",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3612 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2014-8110",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1e6b1501-50a1-5f03-8f68-46504bc1e29b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-8110 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2015-1830",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:07cb1656-11f3-561f-9f09-87ebee79b486",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-1830 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2015-3208",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9e1406d8-ad7c-57b5-b37b-96db9b8cd463",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2015-3208 is a false positive for org.apache.activemq:activemq-shiro 6.1.6-tuxcare.2."
      }
    },
    {
      "id": "CVE-2015-5254",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:aec3736c-21a8-507f-8f63-5ec11c19574a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5254 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2015-6524",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2a01a998-bb14-54b8-84f2-addc70905f29",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6524 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2015-7559",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a6212e8e-ec15-5d47-bd4e-2eb762f36223",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7559 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2016-0734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a388520b-5f58-5a74-8f45-d12d0dbf54db",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0734 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2016-0782",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0b903ce2-48ce-5f16-b843-6e5f3ffcd1f3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0782 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2016-3088",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d1d1fc6e-c893-5fd3-884b-aea94ae14dcd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3088 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2016-6810",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7ba9d4aa-264e-5319-861c-cc81c8e84b55",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6810 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2018-11775",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c274f2cf-69d9-5f1e-8fb5-7b860793d90e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11775 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2019-0222",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b2718f64-92e9-58e1-b03a-fe5bd5c6875f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0222 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2023-46604",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:629338ca-aa09-5c64-889f-bde73d9764d4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46604 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2025-27533",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:787f4fff-4eb9-5051-aa83-533e99226541",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27533 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2026-33227",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:878f6f48-d9cf-5194-89cf-bae747670e29",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33227 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2026-34197",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fbf10300-4b3f-5eb0-9df1-77857e26fde6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34197 is fixed in version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2026-39304",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c6403e69-7945-591e-a1e8-bfdc396da7ef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39304 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2026-40466",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f6cc4210-5cd1-5300-ba3f-7218518f61a8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40466 is fixed in version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2026-41043",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:066e6bab-fc39-52f4-8028-8c9d41bd791c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41043 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2026-41044",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3dfb5147-1868-57e9-b9fb-ca4ae7a0f56a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41044 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2026-42588",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2999460b-39a3-51e1-b13a-7847ccccaa5f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42588 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2026-45505",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a3bfb5da-75aa-55cc-8955-02bf9f570fd0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45505 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    },
    {
      "id": "CVE-2026-49270",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:aee1b072-e5c6-55f7-9a3c-83952d0fbd79",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49270 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-shiro."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq/activemq-shiro@6.1.6-tuxcare.2"
    }
  ]
}