{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:26c0a192-343c-5962-9cae-7fe24c312a4a",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "activemq-stomp",
      "purl": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2",
      "type": "library",
      "group": "org.apache.activemq",
      "bom-ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2",
      "version": "6.1.8-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "activemq-stomp",
            "purl": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8",
            "type": "library",
            "group": "org.apache.activemq",
            "version": "6.1.8"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2013-1879",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:356b7d92-b326-520d-a4d1-8c1a5c4594c9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-1879 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2013-3060",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:684e3bc8-3c2e-54df-b8af-0a1d21f53361",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-3060 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2014-3576",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:07f22e19-f6bd-55cb-9318-cdc6cc682d24",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3576 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2014-3600",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d12ee77d-0e04-5cd0-98b6-963583c48170",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3600 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2014-3612",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:947829c9-c217-57f5-8335-167f5dee5d82",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3612 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2014-8110",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dd4a2a69-e15d-5340-b913-ce062e8a294d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-8110 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2015-1830",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:296a13e5-d715-5d0e-a7b9-799087c901bc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-1830 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2015-3208",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1559161c-b892-54f4-b167-fce12ae8e88b",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2015-3208 is a false positive for org.apache.activemq:activemq-stomp 6.1.8-tuxcare.2."
      }
    },
    {
      "id": "CVE-2015-5254",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4643151e-feae-5cd8-b344-881bd87accc2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5254 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2015-6524",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e15310c2-55a0-5f17-a910-9d563a92f10f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6524 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2015-7559",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0a2bc196-ff3a-51aa-bf6e-eaa8d4b5f6fb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7559 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2016-0734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a46a23d7-07b8-55b7-8159-a880e33f0778",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0734 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2016-0782",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:baec66c4-c0fc-5994-b0f9-32ecd1751c66",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0782 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2016-3088",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3f54fbd4-c368-58a9-a08a-7a90b06b19ac",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3088 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2016-6810",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:87797241-8610-5b45-8976-b91e947464e9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6810 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2018-11775",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:74290ef4-3519-5d52-b010-350d730b82b2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11775 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2019-0222",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7342e28a-c152-5370-aaf6-88aec9eb1de9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0222 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2023-46604",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ad989df8-918c-57bb-83c2-298a40f1e668",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46604 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2025-27533",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:243d655b-5545-5cf8-b437-125706375421",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27533 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2026-33227",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ec040b2f-40f3-5d79-a9cf-d727244c465e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33227 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2026-34197",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bb743559-9123-5ad4-af74-f0e02d3306cf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34197 is fixed in version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2026-39304",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:809533b1-b575-559e-a3bb-3a3f5a7cd8bb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39304 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2026-40466",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:19487b67-f026-5615-b6c8-f698b58d56c1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40466 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2026-41043",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c50cb5d5-2301-5eee-86fc-5fd8912666a6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41043 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2026-41044",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fdcbfa49-03d6-5968-b734-ad8d6a311a2d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41044 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2026-42588",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:45224abb-1571-5cb3-8b1f-e1b641d0537d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42588 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2026-45505",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1582005c-9497-5220-a70d-6b5df32420b2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45505 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2026-49270",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3c39e501-ef25-5fde-a7eb-7ef5bf80c154",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49270 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2026-49432",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c40f91c3-85ec-51c9-8e7f-98bf9096a126",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49432 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    },
    {
      "id": "CVE-2026-53916",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:209d0b54-da2b-54f0-8bd3-6f4bfd83fa18",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53916 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-stomp."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq/activemq-stomp@6.1.8-tuxcare.2"
    }
  ]
}