{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:8119d7b1-12c4-5177-b272-ce4237725479",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "zookeeper-contrib-fatjar",
      "purl": "pkg:maven/org.apache.zookeeper/zookeeper-contrib-fatjar@3.9.1-tuxcare.1",
      "type": "library",
      "group": "org.apache.zookeeper",
      "bom-ref": "pkg:maven/org.apache.zookeeper/zookeeper-contrib-fatjar@3.9.1-tuxcare.1",
      "version": "3.9.1-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "zookeeper-contrib-fatjar",
            "purl": "pkg:maven/org.apache.zookeeper/zookeeper-contrib-fatjar@3.9.1",
            "type": "library",
            "group": "org.apache.zookeeper",
            "version": "3.9.1"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2017-5637",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.zookeeper/zookeeper-contrib-fatjar@3.9.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:27c38680-3a52-5445-bd91-fd084bf4aeda",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5637 affects version 3.9.1-tuxcare.1 of org.apache.zookeeper:zookeeper-contrib-fatjar."
      }
    },
    {
      "id": "CVE-2018-8012",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.zookeeper/zookeeper-contrib-fatjar@3.9.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:66f6b123-332a-5fcf-a4f2-f4ed0d881c81",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8012 affects version 3.9.1-tuxcare.1 of org.apache.zookeeper:zookeeper-contrib-fatjar."
      }
    },
    {
      "id": "CVE-2019-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.zookeeper/zookeeper-contrib-fatjar@3.9.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4d532554-3cd3-58b1-a577-5b31b7369163",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0201 affects version 3.9.1-tuxcare.1 of org.apache.zookeeper:zookeeper-contrib-fatjar."
      }
    },
    {
      "id": "CVE-2023-44981",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.zookeeper/zookeeper-contrib-fatjar@3.9.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0b21b5f2-a597-5060-929a-bfd4bcf624ba",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44981 affects version 3.9.1-tuxcare.1 of org.apache.zookeeper:zookeeper-contrib-fatjar."
      }
    },
    {
      "id": "CVE-2024-23944",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.zookeeper/zookeeper-contrib-fatjar@3.9.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9e919bba-ddc2-5124-bb26-c07ad63b3efd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23944 affects version 3.9.1-tuxcare.1 of org.apache.zookeeper:zookeeper-contrib-fatjar."
      }
    },
    {
      "id": "CVE-2024-51504",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.zookeeper/zookeeper-contrib-fatjar@3.9.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2f2746e2-2d70-5400-ad51-3d1cea4f9775",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-51504 affects version 3.9.1-tuxcare.1 of org.apache.zookeeper:zookeeper-contrib-fatjar."
      }
    },
    {
      "id": "CVE-2025-58457",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.zookeeper/zookeeper-contrib-fatjar@3.9.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2916ca1d-e7ea-5eb4-8c5f-d89f76322e9d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58457 affects version 3.9.1-tuxcare.1 of org.apache.zookeeper:zookeeper-contrib-fatjar."
      }
    },
    {
      "id": "CVE-2026-24281",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.zookeeper/zookeeper-contrib-fatjar@3.9.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1f3611a4-074c-5132-b5d3-40843e1241a8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24281 affects version 3.9.1-tuxcare.1 of org.apache.zookeeper:zookeeper-contrib-fatjar."
      }
    },
    {
      "id": "CVE-2026-24308",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.zookeeper/zookeeper-contrib-fatjar@3.9.1-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d1a902d6-551f-517c-b34d-b58348f7c5a9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24308 affects version 3.9.1-tuxcare.1 of org.apache.zookeeper:zookeeper-contrib-fatjar."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.zookeeper/zookeeper-contrib-fatjar@3.9.1-tuxcare.1"
    }
  ]
}