{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:3433068e-0f53-5899-9e9f-5adb8c6d9fd0",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "artemis-core-client-osgi",
      "purl": "pkg:maven/org.apache.activemq/artemis-core-client-osgi@2.37.0-tuxcare.3",
      "type": "library",
      "group": "org.apache.activemq",
      "bom-ref": "pkg:maven/org.apache.activemq/artemis-core-client-osgi@2.37.0-tuxcare.3",
      "version": "2.37.0-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "artemis-core-client-osgi",
            "purl": "pkg:maven/org.apache.activemq/artemis-core-client-osgi@2.37.0",
            "type": "library",
            "group": "org.apache.activemq",
            "version": "2.37.0"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2020-10727",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-core-client-osgi@2.37.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d252593e-1a70-54d1-905c-dfecedae2bf4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10727 affects version 2.37.0-tuxcare.3 of org.apache.activemq:artemis-core-client-osgi."
      }
    },
    {
      "id": "CVE-2020-13932",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-core-client-osgi@2.37.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:bad1d78a-94d9-5be0-a38d-82960fa864d9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13932 affects version 2.37.0-tuxcare.3 of org.apache.activemq:artemis-core-client-osgi."
      }
    },
    {
      "id": "CVE-2021-26117",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-core-client-osgi@2.37.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4241f0df-cc04-5823-8de0-483baaad2b20",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-26117 affects version 2.37.0-tuxcare.3 of org.apache.activemq:artemis-core-client-osgi."
      }
    },
    {
      "id": "CVE-2021-26118",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-core-client-osgi@2.37.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ea4f2583-0131-5fae-9800-dcdfa20707ff",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-26118 affects version 2.37.0-tuxcare.3 of org.apache.activemq:artemis-core-client-osgi."
      }
    },
    {
      "id": "CVE-2021-4040",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-core-client-osgi@2.37.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f1944755-0eb7-5b44-87eb-b463f0489e40",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-4040 affects version 2.37.0-tuxcare.3 of org.apache.activemq:artemis-core-client-osgi."
      }
    },
    {
      "id": "CVE-2022-23913",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-core-client-osgi@2.37.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6917b68c-7d62-5cb8-a2d2-ff29e079ed8d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-23913 affects version 2.37.0-tuxcare.3 of org.apache.activemq:artemis-core-client-osgi."
      }
    },
    {
      "id": "CVE-2022-35278",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-core-client-osgi@2.37.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:07ebd16f-5f7d-5cef-b328-64bea6e11a18",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35278 affects version 2.37.0-tuxcare.3 of org.apache.activemq:artemis-core-client-osgi."
      }
    },
    {
      "id": "CVE-2023-50780",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-core-client-osgi@2.37.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c69f8b4e-0b39-5c0d-ac8d-553331569d52",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-50780 affects version 2.37.0-tuxcare.3 of org.apache.activemq:artemis-core-client-osgi."
      }
    },
    {
      "id": "CVE-2025-27391",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-core-client-osgi@2.37.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:bff2d4b9-bb29-594b-8056-076f99fc074c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27391 affects version 2.37.0-tuxcare.3 of org.apache.activemq:artemis-core-client-osgi."
      }
    },
    {
      "id": "CVE-2025-27427",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-core-client-osgi@2.37.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:830742e6-d3ca-5417-941f-8da22ee6dc1a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-27427 is fixed in version 2.37.0-tuxcare.3 of org.apache.activemq:artemis-core-client-osgi."
      }
    },
    {
      "id": "CVE-2026-27446",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-core-client-osgi@2.37.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ba701d3c-d075-528f-ae00-147ef9ec9521",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-27446 affects version 2.37.0-tuxcare.3 of org.apache.activemq:artemis-core-client-osgi."
      }
    },
    {
      "id": "CVE-2026-32642",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-core-client-osgi@2.37.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1b1ec055-f22a-528c-a108-b00e3b1ded54",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32642 affects version 2.37.0-tuxcare.3 of org.apache.activemq:artemis-core-client-osgi."
      }
    },
    {
      "id": "CVE-2026-49362",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-core-client-osgi@2.37.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:277661ec-96e7-5a37-b7ea-5843f7e072a4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49362 is fixed in version 2.37.0-tuxcare.3 of org.apache.activemq:artemis-core-client-osgi."
      }
    },
    {
      "id": "CVE-2026-49363",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-core-client-osgi@2.37.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0b79f794-7e66-5f34-ae97-07e0b0482cbc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49363 is fixed in version 2.37.0-tuxcare.3 of org.apache.activemq:artemis-core-client-osgi."
      }
    },
    {
      "id": "CVE-2026-49364",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-core-client-osgi@2.37.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c4947018-4049-5f91-8f93-a8a02472c89b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49364 affects version 2.37.0-tuxcare.3 of org.apache.activemq:artemis-core-client-osgi."
      }
    },
    {
      "id": "CVE-2026-57822",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-core-client-osgi@2.37.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7a7f1c15-0923-59cf-bf2d-c337d691092e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-57822 is fixed in version 2.37.0-tuxcare.3 of org.apache.activemq:artemis-core-client-osgi."
      }
    },
    {
      "id": "CVE-2026-57967",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-core-client-osgi@2.37.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6aa0926a-4bde-538d-a930-2bd8c79c5e43",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-57967 affects version 2.37.0-tuxcare.3 of org.apache.activemq:artemis-core-client-osgi."
      }
    },
    {
      "id": "CVE-2026-67593",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-core-client-osgi@2.37.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2298e8cb-20df-5806-9599-2a6783a53351",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-67593 is fixed in version 2.37.0-tuxcare.3 of org.apache.activemq:artemis-core-client-osgi."
      }
    },
    {
      "id": "CVE-2026-75880",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-core-client-osgi@2.37.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8a64754b-b87f-5df1-a7ee-0acb8483d8e1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-75880 is fixed in version 2.37.0-tuxcare.3 of org.apache.activemq:artemis-core-client-osgi."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq/artemis-core-client-osgi@2.37.0-tuxcare.3"
    }
  ]
}