{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6e049bc5-a8e9-5410-a3f4-72f5bf92273e",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "activemq-spring",
      "purl": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2",
      "type": "library",
      "group": "org.apache.activemq",
      "bom-ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2",
      "version": "6.1.8-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "activemq-spring",
            "purl": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8",
            "type": "library",
            "group": "org.apache.activemq",
            "version": "6.1.8"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2013-1879",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:31a428a0-2b0e-53cd-a872-9c588cc46594",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-1879 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2013-3060",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f5ad5214-584a-5200-933a-679318edf43c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-3060 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2014-3576",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b349d301-e669-5917-8338-8fcbdeccabe8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3576 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2014-3600",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e2ba5e0b-18fe-59e6-b94e-fc048552cfd0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3600 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2014-3612",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ff9fa3c6-17a0-5ca4-9465-f9fa2c1b1ca7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3612 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2014-8110",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a721df4b-da6f-5007-9ab3-dc41fe65f7bd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-8110 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2015-1830",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4cf46f59-60b0-55d6-a708-1be946cf9b9d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-1830 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2015-3208",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:443e1ca0-4d58-50a3-a8be-40d7aab50e49",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2015-3208 is a false positive for org.apache.activemq:activemq-spring 6.1.8-tuxcare.2."
      }
    },
    {
      "id": "CVE-2015-5254",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:06c72e87-ad6f-5422-841e-56fd586b4a78",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5254 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2015-6524",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:31343537-ca83-5093-be77-a1ccb527166e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6524 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2015-7559",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:657ef6e7-58f0-59de-be84-4afad0abc17c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7559 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2016-0734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ee58eb69-bb0f-5e8a-9be1-6c9ba0ff639b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0734 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2016-0782",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f7e5fe84-8f22-5fc0-9e10-e449a6872516",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0782 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2016-3088",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0d5bd128-fd94-52cf-91f7-40a376033983",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3088 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2016-6810",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7b6b613e-d0ec-5cbc-9d4b-2051f1ca206d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6810 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2018-11775",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4e9bce82-f8d7-554e-a0eb-642113d0bc95",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11775 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2019-0222",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dfaa5c6f-90e4-57cc-896e-c077117106df",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0222 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2023-46604",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e96ef610-a239-594e-a4ae-fbd44808cf41",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46604 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2025-27533",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9aac0239-3b17-5f08-84ae-d90e34c734f8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27533 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-33227",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:61dde19c-fa87-5c87-bf25-2d461b7a32ec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33227 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-34197",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:51d52143-3fb5-580e-bee4-5292082d2193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34197 is fixed in version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-39304",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:be00e856-5752-50f7-84b6-8f95e9fc21d4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39304 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-40466",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4f621799-b4fa-5770-9b07-de1d88bc5586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40466 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-41043",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d905fdda-8479-5016-a1c1-ab81720d7ae1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41043 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-41044",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:637e1a49-bf9a-5fc1-b0a4-dc03fe3cfcab",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41044 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-42588",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6b88928d-c223-5dae-ada1-dc844f8cfa4b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42588 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-45505",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:399e4b41-61b5-585b-8f95-d0ac1b217e0b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45505 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-49270",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d2952b86-1062-55c7-b15b-d4db01ca1621",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49270 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-49432",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:76689d3c-10b9-5bbf-9733-820854133032",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49432 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-49434",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:552e48f7-e36d-522e-adb7-ade699d624fa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49434 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-49877",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e94beb0d-5d05-5fd5-aff7-3cf019c978e1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49877 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-50734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f888ff22-678a-5016-b591-65698d803924",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50734 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-52760",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:63da5bde-bfbb-5eb9-81fe-ca380154162a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52760 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-53916",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bd06c18f-6ed2-5c58-89e0-818959556146",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53916 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-53917",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1145871e-b422-5ae5-8de6-89e5a27a9651",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53917 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-54475",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:18eb9cc1-3673-534e-8800-ab65013797de",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54475 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-59878",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f9dfadc5-ec37-52ea-b51f-4c5e98e55f0e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59878 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-61487",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fe63024f-812f-5d90-98cc-18d8dce195e3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-61487 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-74761",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d57923fe-3238-559c-a348-01ebac884369",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-74761 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
    }
  ]
}