{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6f6f2e1e-7d59-5268-b0a7-257055a2aa13",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "artemis-server",
      "purl": "pkg:maven/org.apache.activemq/artemis-server@2.40.0-tuxcare.3",
      "type": "library",
      "group": "org.apache.activemq",
      "bom-ref": "pkg:maven/org.apache.activemq/artemis-server@2.40.0-tuxcare.3",
      "version": "2.40.0-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "artemis-server",
            "purl": "pkg:maven/org.apache.activemq/artemis-server@2.40.0",
            "type": "library",
            "group": "org.apache.activemq",
            "version": "2.40.0"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2020-10727",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-server@2.40.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:65be9c20-0cb4-5d72-aaf5-03e70cc514b6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10727 affects version 2.40.0-tuxcare.3 of org.apache.activemq:artemis-server."
      }
    },
    {
      "id": "CVE-2021-4040",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-server@2.40.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9ccedda0-a984-5150-87f4-192f70e7bf92",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-4040 affects version 2.40.0-tuxcare.3 of org.apache.activemq:artemis-server."
      }
    },
    {
      "id": "CVE-2022-23913",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-server@2.40.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:70a38a1c-3586-5d40-aa9f-67ed258e89e2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-23913 affects version 2.40.0-tuxcare.3 of org.apache.activemq:artemis-server."
      }
    },
    {
      "id": "CVE-2022-35278",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-server@2.40.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e6006630-7af8-5167-821e-551db79ad2f4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-35278 affects version 2.40.0-tuxcare.3 of org.apache.activemq:artemis-server."
      }
    },
    {
      "id": "CVE-2025-27427",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-server@2.40.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2e524df1-85d0-594b-8858-02b077eeaa72",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27427 affects version 2.40.0-tuxcare.3 of org.apache.activemq:artemis-server."
      }
    },
    {
      "id": "CVE-2026-27446",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-server@2.40.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c1aa75d9-7d75-5ff1-8ec0-b7e726b093cb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-27446 affects version 2.40.0-tuxcare.3 of org.apache.activemq:artemis-server."
      }
    },
    {
      "id": "CVE-2026-49362",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-server@2.40.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1013b109-2241-58bb-b32c-f69a31cf7a8e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49362 affects version 2.40.0-tuxcare.3 of org.apache.activemq:artemis-server."
      }
    },
    {
      "id": "CVE-2026-49363",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-server@2.40.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f91e4184-04ab-5fd5-a9ea-cdfce77d1924",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49363 affects version 2.40.0-tuxcare.3 of org.apache.activemq:artemis-server."
      }
    },
    {
      "id": "CVE-2026-49364",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-server@2.40.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a3e35cf1-be04-5396-87bd-3ba859007f05",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49364 affects version 2.40.0-tuxcare.3 of org.apache.activemq:artemis-server."
      }
    },
    {
      "id": "CVE-2026-57967",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/artemis-server@2.40.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:cb7bdd3d-7bef-59c8-800f-80319d0df747",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-57967 affects version 2.40.0-tuxcare.3 of org.apache.activemq:artemis-server."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq/artemis-server@2.40.0-tuxcare.3"
    }
  ]
}