{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:24d2a9fa-ef96-572c-a3f8-946563ca55ad",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "activemq-stomp",
      "purl": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3",
      "type": "library",
      "group": "org.apache.activemq",
      "bom-ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3",
      "version": "6.1.6-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "activemq-stomp",
            "purl": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6",
            "type": "library",
            "group": "org.apache.activemq",
            "version": "6.1.6"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2013-1879",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b674e84d-3d81-5655-8d6a-c1ca775a5f44",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-1879 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2013-3060",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a484f113-7e14-5603-a101-52d9a1462e40",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-3060 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2014-3576",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:bc5ab698-4143-54c3-ad54-1746eb834a30",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3576 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2014-3600",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:707f34ae-5297-537d-b9f2-52baddbb8399",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3600 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2014-3612",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:634c0a77-8203-5bf5-ab65-ca6f3a5f381b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3612 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2014-8110",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2b098542-e2c7-5598-abc3-8f2553d9c20e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-8110 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2015-1830",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6315ea91-a06f-5239-b340-b8a1f712b921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-1830 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2015-3208",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7534f956-0223-55bc-8362-72f850078705",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2015-3208 is a false positive for org.apache.activemq:activemq-stomp 6.1.6-tuxcare.3."
      }
    },
    {
      "id": "CVE-2015-5254",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f80e9378-03b7-5ded-8dfe-788bf986af2e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5254 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2015-6524",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c4e7c16c-ede6-55e9-92ed-7f56b5eefbc5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6524 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2015-7559",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:aa341a20-eb0d-5ec8-96d1-bd6884eb75e6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7559 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2016-0734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:426476fb-69a3-5ef4-94c4-3fd01c319974",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0734 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2016-0782",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:269a2372-ba3a-5d17-ac49-c13dd27d917e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0782 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2016-3088",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:21eaa1db-e0bd-5678-b7bb-8b34fc2dd3f5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3088 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2016-6810",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d09f9060-b1e3-5840-b7b8-60f01c88c094",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6810 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2018-11775",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:83e83338-304a-5205-af6c-98d9797c052d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11775 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2019-0222",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d520bfc8-b5f7-5396-851d-02ac41574c4a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0222 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2023-46604",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:257ee1d0-ddda-59b8-a627-a38d2da1c3e4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46604 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2025-27533",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2f9bca39-38ce-5ebe-9b47-83cfa8833194",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27533 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2026-33227",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d4adad51-35af-5baf-81f1-54380a53c9ea",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33227 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2026-34197",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1f9d473a-8d65-574c-8f90-4a738abe5cd4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34197 is fixed in version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2026-39304",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7cb87c40-4a1e-5f87-8cac-557818ced377",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39304 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2026-40466",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8eb78efe-f927-5035-9e43-e00fa893c653",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40466 is fixed in version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2026-41043",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f8e9a030-5380-5907-9e42-e4aeb5e682e1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41043 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2026-41044",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d7d74130-34b8-5bd6-a372-1db2804f081d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41044 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2026-42588",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d98bc25e-9ae5-5a6e-b460-7c4021afaab1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42588 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2026-45505",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:af4092b0-5990-532c-8d4a-67ffd8d19558",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45505 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2026-49270",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:60c336ca-39a9-5540-8ec8-2aac8185413d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49270 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2026-49432",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e8eb55a9-054a-593b-93b4-659fbe0ad9de",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49432 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2026-53916",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1cb6ae70-d323-5b33-b68f-30ebbb71bc2d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53916 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-stomp."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.6-tuxcare.3"
    }
  ]
}