{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:98bf0d69-8cb4-5ae8-a02e-0e99da3983ab",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "activemq-spring",
      "purl": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2",
      "type": "library",
      "group": "org.apache.activemq",
      "bom-ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2",
      "version": "6.1.8-tuxcare.2",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-66168",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:82caf8a4-0f88-548a-a280-5d7ea11613b0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66168 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-33227",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:61dde19c-fa87-5c87-bf25-2d461b7a32ec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33227 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-34197",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:51d52143-3fb5-580e-bee4-5292082d2193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34197 is fixed in version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-39304",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:be00e856-5752-50f7-84b6-8f95e9fc21d4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39304 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-40046",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:61d6af7b-2e79-5582-9bc6-372943473877",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40046 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-40466",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4f621799-b4fa-5770-9b07-de1d88bc5586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40466 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-41043",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d905fdda-8479-5016-a1c1-ab81720d7ae1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41043 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-41044",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:637e1a49-bf9a-5fc1-b0a4-dc03fe3cfcab",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41044 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-42253",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9b1c1185-0c92-58b2-bc02-aa423c7cb623",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42253 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-42588",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6b88928d-c223-5dae-ada1-dc844f8cfa4b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42588 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-45505",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:399e4b41-61b5-585b-8f95-d0ac1b217e0b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45505 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-46605",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:12d26b04-d4d6-506d-885c-6b8103d9da62",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46605 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-49157",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7461fa97-510d-597b-84c9-2dc36aa8d427",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49157 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-49270",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d2952b86-1062-55c7-b15b-d4db01ca1621",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49270 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-49432",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:76689d3c-10b9-5bbf-9733-820854133032",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49432 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-49434",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:552e48f7-e36d-522e-adb7-ade699d624fa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49434 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-49877",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e94beb0d-5d05-5fd5-aff7-3cf019c978e1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49877 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-50734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f888ff22-678a-5016-b591-65698d803924",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50734 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-52760",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:63da5bde-bfbb-5eb9-81fe-ca380154162a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-52760 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-53916",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bd06c18f-6ed2-5c58-89e0-818959556146",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53916 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-53917",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1145871e-b422-5ae5-8de6-89e5a27a9651",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53917 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-54475",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:18eb9cc1-3673-534e-8800-ab65013797de",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54475 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-59878",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f9dfadc5-ec37-52ea-b51f-4c5e98e55f0e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59878 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-61487",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fe63024f-812f-5d90-98cc-18d8dce195e3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-61487 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    },
    {
      "id": "CVE-2026-74761",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d57923fe-3238-559c-a348-01ebac884369",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-74761 affects version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-spring."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq/activemq-spring@6.1.8-tuxcare.2"
    }
  ]
}