{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:3ece3971-02b8-5999-ad10-3e749513c098",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "nimbus-jose-jwt",
      "purl": "pkg:maven/com.nimbusds/nimbus-jose-jwt@3.10-tuxcare.1",
      "type": "library",
      "group": "com.nimbusds",
      "bom-ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@3.10-tuxcare.1",
      "version": "3.10-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "nimbus-jose-jwt",
            "purl": "pkg:maven/com.nimbusds/nimbus-jose-jwt@3.10",
            "type": "library",
            "group": "com.nimbusds",
            "version": "3.10"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2017-12972",
      "affects": [
        {
          "ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0f7e3ca3-58e9-54e6-8741-6692788d8cad",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-12972 affects version 3.10-tuxcare.1 of com.nimbusds:nimbus-jose-jwt."
      }
    },
    {
      "id": "CVE-2017-12973",
      "affects": [
        {
          "ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:78a86d0a-8fa3-51f9-944d-22e6967d39d0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-12973 affects version 3.10-tuxcare.1 of com.nimbusds:nimbus-jose-jwt."
      }
    },
    {
      "id": "CVE-2017-12974",
      "affects": [
        {
          "ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9fffb491-b247-53ea-9610-5b4358b86d8b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-12974 affects version 3.10-tuxcare.1 of com.nimbusds:nimbus-jose-jwt."
      }
    },
    {
      "id": "CVE-2019-17195",
      "affects": [
        {
          "ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:316afa0c-cbe5-5788-96a6-3367e57c4810",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-17195 affects version 3.10-tuxcare.1 of com.nimbusds:nimbus-jose-jwt."
      }
    },
    {
      "id": "CVE-2023-52428",
      "affects": [
        {
          "ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:64bd0321-af1d-5860-ab96-7e44d01119aa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-52428 affects version 3.10-tuxcare.1 of com.nimbusds:nimbus-jose-jwt."
      }
    },
    {
      "id": "CVE-2025-53864",
      "affects": [
        {
          "ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8b162fe3-3bb1-5b33-b15b-02821ea60223",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-53864 affects version 3.10-tuxcare.1 of com.nimbusds:nimbus-jose-jwt."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@3.10-tuxcare.1"
    }
  ]
}