{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f4de4372-005b-50ea-bda1-ac5bf8703b3a",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "async-http-client-extras-parent",
      "purl": "pkg:maven/org.asynchttpclient/async-http-client-extras-parent@2.12.3-tuxcare.1",
      "type": "library",
      "group": "org.asynchttpclient",
      "bom-ref": "pkg:maven/org.asynchttpclient/async-http-client-extras-parent@2.12.3-tuxcare.1",
      "version": "2.12.3-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "async-http-client-extras-parent",
            "purl": "pkg:maven/org.asynchttpclient/async-http-client-extras-parent@2.12.3",
            "type": "library",
            "group": "org.asynchttpclient",
            "version": "2.12.3"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2017-14063",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client-extras-parent@2.12.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4238339a-85a4-5c5c-8c0e-b07299329ba8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-14063 affects version 2.12.3-tuxcare.1 of org.asynchttpclient:async-http-client-extras-parent."
      }
    },
    {
      "id": "CVE-2024-53990",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client-extras-parent@2.12.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ae09af43-d3e6-500b-9973-e81f67e9b5a4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-53990 affects version 2.12.3-tuxcare.1 of org.asynchttpclient:async-http-client-extras-parent."
      }
    },
    {
      "id": "CVE-2026-107226",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client-extras-parent@2.12.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:84f16262-69ae-5dc5-8f18-fc63230b34b4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-107226 affects version 2.12.3-tuxcare.1 of org.asynchttpclient:async-http-client-extras-parent."
      }
    },
    {
      "id": "CVE-2026-107227",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client-extras-parent@2.12.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:11b579d5-9c7e-5815-8262-022bdb434e17",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-107227 affects version 2.12.3-tuxcare.1 of org.asynchttpclient:async-http-client-extras-parent."
      }
    },
    {
      "id": "CVE-2026-107228",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client-extras-parent@2.12.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b1e613e7-24eb-5173-bf72-58c165b613f2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-107228 affects version 2.12.3-tuxcare.1 of org.asynchttpclient:async-http-client-extras-parent."
      }
    },
    {
      "id": "CVE-2026-107230",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client-extras-parent@2.12.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:61263870-bddb-5a75-a498-4b50a7a9dc0f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-107230 affects version 2.12.3-tuxcare.1 of org.asynchttpclient:async-http-client-extras-parent."
      }
    },
    {
      "id": "CVE-2026-107231",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client-extras-parent@2.12.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d8251f63-3086-55d9-bf50-f3200a90301b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-107231 affects version 2.12.3-tuxcare.1 of org.asynchttpclient:async-http-client-extras-parent."
      }
    },
    {
      "id": "CVE-2026-107280",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client-extras-parent@2.12.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3ebee50a-614e-5473-8f5b-8a54da02ffce",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-107280 affects version 2.12.3-tuxcare.1 of org.asynchttpclient:async-http-client-extras-parent."
      }
    },
    {
      "id": "CVE-2026-107282",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client-extras-parent@2.12.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e6f7432d-c32f-59ed-acbb-f84cd4698ae9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-107282 affects version 2.12.3-tuxcare.1 of org.asynchttpclient:async-http-client-extras-parent."
      }
    },
    {
      "id": "CVE-2026-107283",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client-extras-parent@2.12.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e7d32ecd-2683-544a-9711-0347cb254684",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-107283 affects version 2.12.3-tuxcare.1 of org.asynchttpclient:async-http-client-extras-parent."
      }
    },
    {
      "id": "CVE-2026-107285",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client-extras-parent@2.12.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:49616bf1-d1cc-5d7d-9035-979846a8c8a1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-107285 affects version 2.12.3-tuxcare.1 of org.asynchttpclient:async-http-client-extras-parent."
      }
    },
    {
      "id": "CVE-2026-40490",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client-extras-parent@2.12.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5c399e8a-7c4b-598f-a626-f08a153cabfe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40490 affects version 2.12.3-tuxcare.1 of org.asynchttpclient:async-http-client-extras-parent."
      }
    },
    {
      "id": "CVE-2026-45300",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client-extras-parent@2.12.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c263cf2f-c9bf-583a-81bf-70a1ae305626",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45300 affects version 2.12.3-tuxcare.1 of org.asynchttpclient:async-http-client-extras-parent."
      }
    },
    {
      "id": "CVE-2026-55688",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client-extras-parent@2.12.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1d6ba35c-bbc1-5918-91b5-b105d069e879",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55688 affects version 2.12.3-tuxcare.1 of org.asynchttpclient:async-http-client-extras-parent."
      }
    },
    {
      "id": "CVE-2026-85716",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client-extras-parent@2.12.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b236a35e-3831-524f-afc8-909e514d29c6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-85716 affects version 2.12.3-tuxcare.1 of org.asynchttpclient:async-http-client-extras-parent."
      }
    },
    {
      "id": "CVE-2026-85717",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client-extras-parent@2.12.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a4956b8b-a92d-5b07-bb26-174ae9792945",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-85717 affects version 2.12.3-tuxcare.1 of org.asynchttpclient:async-http-client-extras-parent."
      }
    },
    {
      "id": "CVE-2026-85720",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client-extras-parent@2.12.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b3292c36-2f49-5d32-bc1f-c896a0812434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-85720 affects version 2.12.3-tuxcare.1 of org.asynchttpclient:async-http-client-extras-parent."
      }
    },
    {
      "id": "CVE-2026-85721",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client-extras-parent@2.12.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f6dac9fd-6aee-5f8d-a357-b0752867ce2d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-85721 affects version 2.12.3-tuxcare.1 of org.asynchttpclient:async-http-client-extras-parent."
      }
    },
    {
      "id": "GHSA-cmxv-58fp-fm3g",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client-extras-parent@2.12.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:eb5a37f7-8726-5f53-bf3a-e4359a76adc5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-cmxv-58fp-fm3g affects version 2.12.3-tuxcare.1 of org.asynchttpclient:async-http-client-extras-parent."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.asynchttpclient/async-http-client-extras-parent@2.12.3-tuxcare.1"
    }
  ]
}