{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:64df68fe-56e8-5bf2-8e59-6efd18236fc2",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "apache-activemq",
      "purl": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1",
      "type": "library",
      "group": "org.apache.activemq",
      "bom-ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1",
      "version": "6.1.6-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "apache-activemq",
            "purl": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6",
            "type": "library",
            "group": "org.apache.activemq",
            "version": "6.1.6"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2012-6551",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9e472008-4d1b-5554-98ba-6103bafadbca",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2012-6551 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2013-1879",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:613793eb-4627-57fd-b8f9-a60746efa986",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-1879 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2013-3060",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2f213731-dc4e-50be-98f8-60cf24074c7e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-3060 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2014-3576",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:515f86e8-b80c-5e5e-9662-e113b78e54ad",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3576 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2014-3600",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:75898fbc-f7e9-53e2-b775-92cf78eb991c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3600 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2014-3612",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2d6f7b01-f2dc-5145-805e-4c9695de4601",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3612 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2014-8110",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ae777588-b5e4-5e24-8ee2-b46d0e09bafa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-8110 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2015-1830",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fa331671-24d2-5096-8775-9d70ae54dc27",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-1830 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2015-3208",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9d529c19-c606-5638-a6b7-17c335209d39",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2015-3208 is a false positive for org.apache.activemq:apache-activemq 6.1.6-tuxcare.1."
      }
    },
    {
      "id": "CVE-2015-5254",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9812633d-ea72-56d4-a45b-689b6fd95d9d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5254 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2015-6524",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cb1ab57a-2fc2-5bea-abd8-562796fac250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6524 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2015-7559",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d21a3c05-fdf1-5092-8e65-147d066dae4e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7559 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2016-0734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:eb085cd8-8bd8-5e42-afb6-f1da0f7f72ef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0734 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2016-0782",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ab0cbc1f-3530-56cb-8408-1f4573e98288",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0782 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2016-3088",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c27e58e3-0cd7-50a8-827e-cb6604a392bf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3088 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2016-6810",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ff747ab6-a30e-525d-89ac-3d526a14c803",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6810 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2018-11775",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9b6cf7ca-8ef5-5e0a-b59b-38bb2522bfac",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11775 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2019-0222",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e746f905-3811-5297-a354-8dd2f4328f12",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0222 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2022-41678",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c576585d-33f9-5efe-b13e-43131b49ab0b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41678 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2023-46604",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:df6dc7ee-88ca-55c9-9341-e1db40a21f85",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46604 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2024-32114",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e3888b3c-1b8b-5223-a309-551618adaab1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-32114 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2025-27533",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ec7258b7-22d5-5ac6-8469-6c9c61b677d2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27533 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2025-66168",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:92c6d8e6-9bd7-5899-b685-fb6cad6601ae",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66168 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-33227",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:830b55ea-abb5-53a7-896b-973ee32a2fe6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33227 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-34197",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2f0cc18f-4aaa-516b-8ad5-8087c4b14617",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34197 is fixed in version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-39304",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:15bd4b3f-b709-5ecc-a46a-2982ce711602",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39304 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-40046",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e363229a-e053-558a-a3ca-0f047df9922a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40046 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-40466",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:196901af-b669-5f93-b797-0ce2cd78b4a3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40466 is fixed in version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-41043",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8d2b7a29-3b76-57dd-9db1-6ca65e1bdf17",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41043 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-41044",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:30ad613d-1195-50a1-8c31-1abfb0c00f5b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41044 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-42253",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bfdbaa70-c1dd-5c00-bc94-a4e5a84ba066",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42253 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-42588",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c4e5281d-4b40-5d4a-9249-487d7d0665a9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42588 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-45505",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4da9fe3c-3cc0-53c5-8f71-5a11cde263ca",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45505 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-46605",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f2f54510-d90d-51e1-8846-49f6cc2722a6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46605 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq, and is fixed in 6.1.6-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-49157",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9540db37-bfee-51e6-a11f-024c42b7aca2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49157 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-49270",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fec79b99-1ea6-50ec-9b32-2d6246b44f89",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49270 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-50734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7060a75a-8c25-5b6e-b463-37c4f531f94e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50734 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-53917",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:72c7ee96-bcf3-5bbc-9499-87c73f7314fd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53917 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq, and is fixed in 6.1.6-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-74761",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fed9f856-9b24-5de9-a83c-dd8f23b593c7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-74761 affects version 6.1.6-tuxcare.1 of org.apache.activemq:apache-activemq."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.1"
    }
  ]
}