{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:97945de2-febe-5899-9a4b-ceac40f4d146",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "zookeeper",
      "purl": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.5-tuxcare.1",
      "type": "library",
      "group": "org.apache.zookeeper",
      "bom-ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.5-tuxcare.1",
      "version": "3.5.5-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "zookeeper",
            "purl": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.5",
            "type": "library",
            "group": "org.apache.zookeeper",
            "version": "3.5.5"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2017-5637",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:184022fc-fc79-5054-a0b2-cc4724f46c02",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5637 affects version 3.5.5-tuxcare.1 of org.apache.zookeeper:zookeeper."
      }
    },
    {
      "id": "CVE-2018-8012",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8f11636a-fbbd-57b2-be02-cf2e52c58f84",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8012 affects version 3.5.5-tuxcare.1 of org.apache.zookeeper:zookeeper."
      }
    },
    {
      "id": "CVE-2019-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6f8ec2ac-fd8d-5a6f-a62c-9af86635d3fd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0201 affects version 3.5.5-tuxcare.1 of org.apache.zookeeper:zookeeper."
      }
    },
    {
      "id": "CVE-2023-44981",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f12cc607-24dd-5b4a-ba1b-7d6b6f1a4f77",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44981 affects version 3.5.5-tuxcare.1 of org.apache.zookeeper:zookeeper."
      }
    },
    {
      "id": "CVE-2024-23944",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:867931d4-1b6a-5ed1-94c9-f4ae38430a9f",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2024-23944 does not affect version 3.5.5-tuxcare.1 of org.apache.zookeeper:zookeeper. not_affected \u2014 ZooKeeper 3.5.5 is not affected by CVE-2024-23944. This vulnerability is specific to persistent watchers (addWatch command with PERSISTENT/PERSISTENT_RECURSIVE modes), which were introduced in ZooKeeper 3.6.0 on November 8, 2019\u2014seven months after version 3.5.5 was released on April 2, 2019. While the underlying code pattern (watch event delivery without ACL checks in NIOServerCnxn.process() an...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2024-51504",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aa15c2a8-d935-51b7-8f1b-f5cdb312a9c8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-51504 affects version 3.5.5-tuxcare.1 of org.apache.zookeeper:zookeeper."
      }
    },
    {
      "id": "CVE-2025-58457",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:93ee6541-a719-5af5-93ec-c52b73ca93d8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-58457 affects version 3.5.5-tuxcare.1 of org.apache.zookeeper:zookeeper."
      }
    },
    {
      "id": "CVE-2026-24281",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b9f6dfc0-3c8b-5ae8-b349-f4430044e241",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24281 affects version 3.5.5-tuxcare.1 of org.apache.zookeeper:zookeeper."
      }
    },
    {
      "id": "CVE-2026-24308",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:67e054aa-a2a0-5a9e-bc76-b7263d8dcfda",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24308 affects version 3.5.5-tuxcare.1 of org.apache.zookeeper:zookeeper."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.5-tuxcare.1"
    }
  ]
}