{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:04a6a366-419d-5501-a0ba-c1537a2a246e",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "apache-activemq",
      "purl": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2",
      "type": "library",
      "group": "org.apache.activemq",
      "bom-ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2",
      "version": "6.1.6-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "apache-activemq",
            "purl": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6",
            "type": "library",
            "group": "org.apache.activemq",
            "version": "6.1.6"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2012-6551",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5563f656-ab36-5972-b9d4-2463a4142316",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2012-6551 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2013-1879",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:97eae8b5-79e8-559f-94e8-a414378bdbd1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-1879 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2013-3060",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ca4019e1-e159-50dd-a78b-b0f22c7c26f9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-3060 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2014-3576",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ad343698-7ed1-5a88-9f3c-af3d699e48f3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3576 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2014-3600",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:91cf3d53-d44e-500f-a4c2-efa3be493ba5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3600 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2014-3612",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:26a742c8-9222-58ac-ad5b-e2a63df5810b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3612 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2014-8110",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:15519e1f-6c7b-54f8-98b1-4915891c3359",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-8110 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2015-1830",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7f07f2c0-9fa3-51ec-bf9b-b0b1f103802b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-1830 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2015-3208",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b7404bf9-ad01-54db-9ca3-0354cc8f7677",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2015-3208 is a false positive for org.apache.activemq:apache-activemq 6.1.6-tuxcare.2."
      }
    },
    {
      "id": "CVE-2015-5254",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b426506d-3d8b-5b73-bdc8-8f3dc48a5116",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5254 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2015-6524",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d2a048a3-cffe-590b-a098-8aa6f7950379",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6524 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2015-7559",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:669800d0-d103-52b4-8879-bcce0492a54b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7559 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2016-0734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6e054332-11be-5e48-8c32-e5d0685a469b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0734 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2016-0782",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:83eaacc4-d937-59aa-b13c-800ee0e33379",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0782 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2016-3088",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:44da1cb0-ad3d-5b59-8fda-71fc276604b7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3088 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2016-6810",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e65ca0cd-b46f-5119-afc6-3f022eace9a6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6810 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2018-11775",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1004d5b3-19b8-5e09-afe7-5cd02ea45bb7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11775 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2019-0222",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9abc0017-f577-5920-9f7a-c3c55237183f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0222 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2022-41678",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8339fc3a-d2ff-5436-9a2b-df895e3146eb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41678 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2023-46604",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8b9d2d53-2e83-527e-9c06-72f0e8c2dfe4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46604 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2024-32114",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c27ffa1e-b17c-5dc5-9b9b-bcfba68bfff6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-32114 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2025-27533",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dfd79679-18f6-5baa-b8cf-9792dfeba47b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27533 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2025-66168",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:117cf626-4833-5844-b376-507ed6d001c3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66168 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-33227",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f696e225-e3cf-5534-b176-a6b3a3de5a89",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33227 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-34197",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c2d60194-0230-5409-974a-36873ceb9f60",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34197 is fixed in version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-39304",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:654d1436-0fc7-5240-a352-880bb4b31157",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39304 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-40046",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3e0f1a8a-88a7-529e-81da-e0702b5031ef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40046 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-40466",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4152211e-c627-593e-8295-49dd898289ad",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40466 is fixed in version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-41043",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:be21f16d-51cf-5f0c-b3b8-f736c2349e31",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41043 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-41044",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b55abfab-0487-5d3c-9734-a58c24383035",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41044 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-42253",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a61bb708-bb71-552d-baa8-4543d6e3dbdd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42253 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-42588",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2d84f3e2-ba97-5a67-b35d-5d64f7d00b26",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42588 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-45505",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:14b3476e-708d-5598-8cfa-26f5e93e3e0b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45505 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-46605",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:aa8b77fa-3bc6-5599-b3ea-9655ef8427ed",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46605 is fixed in version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-49157",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c4e95e58-0f94-5939-9b13-822a3a5aa2a6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49157 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-49270",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:99191fff-5987-5207-b70d-a78d9296d669",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49270 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-50734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ad0ef274-537e-5a31-a796-d895899dc6f0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50734 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-53917",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:92bee70d-e27e-58f0-b830-de5c69771442",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-53917 is fixed in version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    },
    {
      "id": "CVE-2026-74761",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:20dc7d78-9af4-52bf-9b7e-7dd20bc14d27",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-74761 affects version 6.1.6-tuxcare.2 of org.apache.activemq:apache-activemq."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq/apache-activemq@6.1.6-tuxcare.2"
    }
  ]
}