{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:914058b2-016b-51e8-bbc8-2169ad19b38e",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "neethi",
      "purl": "pkg:maven/org.apache.neethi/neethi@3.2.0-tuxcare.1",
      "type": "library",
      "group": "org.apache.neethi",
      "bom-ref": "pkg:maven/org.apache.neethi/neethi@3.2.0-tuxcare.1",
      "version": "3.2.0-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "neethi",
            "purl": "pkg:maven/org.apache.neethi/neethi@3.2.0",
            "type": "library",
            "group": "org.apache.neethi",
            "version": "3.2.0"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-42402",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.neethi/neethi@3.2.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fc68fcfe-8195-55a8-b31f-37bff3de7fc6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42402 affects version 3.2.0-tuxcare.1 of org.apache.neethi:neethi."
      }
    },
    {
      "id": "CVE-2026-42403",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.neethi/neethi@3.2.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:705955ca-8306-52ba-8190-347e771b54c8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42403 is fixed in version 3.2.0-tuxcare.1 of org.apache.neethi:neethi."
      }
    },
    {
      "id": "CVE-2026-42404",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.neethi/neethi@3.2.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6bd2db94-adcc-59c1-95cd-58d86a7245ef",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42404 is fixed in version 3.2.0-tuxcare.1 of org.apache.neethi:neethi."
      }
    },
    {
      "id": "CVE-2026-66142",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.neethi/neethi@3.2.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e31da487-8713-531c-80be-a950b9d530d5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66142 affects version 3.2.0-tuxcare.1 of org.apache.neethi:neethi."
      }
    },
    {
      "id": "CVE-2026-66143",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.neethi/neethi@3.2.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6282ce8a-055e-5b7c-82ad-97028464e04d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66143 affects version 3.2.0-tuxcare.1 of org.apache.neethi:neethi."
      }
    },
    {
      "id": "CVE-2026-66144",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.neethi/neethi@3.2.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fdac27bb-b3fa-57d8-9995-437ab892c63c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66144 affects version 3.2.0-tuxcare.1 of org.apache.neethi:neethi."
      }
    },
    {
      "id": "CVE-2026-91863",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.neethi/neethi@3.2.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8dd903b3-9185-59c4-92ee-ea8989bb87c5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-91863 affects version 3.2.0-tuxcare.1 of org.apache.neethi:neethi."
      }
    },
    {
      "id": "CVE-2026-91864",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.neethi/neethi@3.2.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0ce15943-0bd3-5054-b606-1b085b4ab28a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-91864 affects version 3.2.0-tuxcare.1 of org.apache.neethi:neethi."
      }
    },
    {
      "id": "CVE-2026-91865",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.neethi/neethi@3.2.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:69075adb-11fa-542a-b318-987ae1282312",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-91865 affects version 3.2.0-tuxcare.1 of org.apache.neethi:neethi."
      }
    },
    {
      "id": "CVE-2026-91866",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.neethi/neethi@3.2.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1ec4f4f1-a6f2-53af-878c-221ef58062a2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-91866 affects version 3.2.0-tuxcare.1 of org.apache.neethi:neethi."
      }
    },
    {
      "id": "CVE-2026-91867",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.neethi/neethi@3.2.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c5240067-1900-525b-aa18-bfbba9b432fb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-91867 affects version 3.2.0-tuxcare.1 of org.apache.neethi:neethi."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.neethi/neethi@3.2.0-tuxcare.1"
    }
  ]
}