{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c3f45e69-1823-5b1d-a285-512fcb92e449",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "neo4j-java-driver",
      "purl": "pkg:maven/org.neo4j.driver/neo4j-java-driver@4.1.2-tuxcare.1",
      "type": "library",
      "group": "org.neo4j.driver",
      "bom-ref": "pkg:maven/org.neo4j.driver/neo4j-java-driver@4.1.2-tuxcare.1",
      "version": "4.1.2-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "neo4j-java-driver",
            "purl": "pkg:maven/org.neo4j.driver/neo4j-java-driver@4.1.2",
            "type": "library",
            "group": "org.neo4j.driver",
            "version": "4.1.2"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-1337",
      "affects": [
        {
          "ref": "pkg:maven/org.neo4j.driver/neo4j-java-driver@4.1.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:172ce588-c956-5f68-8bcf-076afa987301",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2026-1337 is a false positive for org.neo4j.driver:neo4j-java-driver 4.1.2-tuxcare.1. false_positive \u2014 CVE-2026-1337 is a wrong-project match. The CVE explicitly targets \"Neo4j Enterprise and Community editions\" (database server products with year.month versioning like 2026.01), while this repository is the \"Neo4j Java Driver\" version 4.1.2 (a client library with semantic versioning). These are distinct products in the Neo4j ecosystem. The database server code is not present in this repository i..."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.neo4j.driver/neo4j-java-driver@4.1.2-tuxcare.1"
    }
  ]
}