{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:fa408dc0-52f7-5a4e-bb2f-30392aafe93c",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "activemq-tooling",
      "purl": "pkg:maven/org.apache.activemq.tooling/activemq-tooling@6.1.6-tuxcare.2",
      "type": "library",
      "group": "org.apache.activemq.tooling",
      "bom-ref": "pkg:maven/org.apache.activemq.tooling/activemq-tooling@6.1.6-tuxcare.2",
      "version": "6.1.6-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "activemq-tooling",
            "purl": "pkg:maven/org.apache.activemq.tooling/activemq-tooling@6.1.6",
            "type": "library",
            "group": "org.apache.activemq.tooling",
            "version": "6.1.6"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-66168",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-tooling@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:cd46d14e-8efb-578a-9003-77abd7a66e13",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66168 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-tooling."
      }
    },
    {
      "id": "CVE-2026-33227",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-tooling@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1cd48cb7-975f-56ad-99c0-2e330ab76456",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33227 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-tooling."
      }
    },
    {
      "id": "CVE-2026-34197",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-tooling@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8c0c28c5-3738-5d95-a2be-60c0e41e370f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34197 is fixed in version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-tooling."
      }
    },
    {
      "id": "CVE-2026-39304",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-tooling@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6a416c96-56e0-5778-966b-7b5bee01363c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39304 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-tooling."
      }
    },
    {
      "id": "CVE-2026-40046",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-tooling@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ee893606-b1f4-595e-b22c-0cf59ed1afcd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40046 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-tooling."
      }
    },
    {
      "id": "CVE-2026-40466",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-tooling@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:98d2e70c-8d09-5eef-8d63-bc9e71b4e155",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40466 is fixed in version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-tooling."
      }
    },
    {
      "id": "CVE-2026-41043",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-tooling@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:969135c1-93d5-5ec8-8819-441a6b8fb185",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41043 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-tooling."
      }
    },
    {
      "id": "CVE-2026-41044",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-tooling@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a8891a53-ef08-574b-9403-7fd66b819a1b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41044 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-tooling."
      }
    },
    {
      "id": "CVE-2026-42253",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-tooling@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:12c794b9-11e7-520e-865b-a6b67adfc910",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42253 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-tooling."
      }
    },
    {
      "id": "CVE-2026-42588",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-tooling@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1d0c8423-e039-515d-a65c-ff21ccc7d59c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42588 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-tooling."
      }
    },
    {
      "id": "CVE-2026-45505",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-tooling@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dce87011-af27-51f9-8dee-acaae20a6ec1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45505 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-tooling."
      }
    },
    {
      "id": "CVE-2026-46605",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-tooling@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f66a19ba-3291-55fd-85cd-a95c2a61a5d4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46605 is fixed in version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-tooling."
      }
    },
    {
      "id": "CVE-2026-49157",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-tooling@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a0784c75-2dc1-5532-b644-9f7b30b13895",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49157 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-tooling."
      }
    },
    {
      "id": "CVE-2026-49270",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-tooling@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:41a2f7cb-b1c9-5e21-afa5-59705c20a665",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49270 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-tooling."
      }
    },
    {
      "id": "CVE-2026-50734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-tooling@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7f0b95d2-ab89-5055-b5fa-945f3fc05e55",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50734 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-tooling."
      }
    },
    {
      "id": "CVE-2026-53917",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-tooling@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e7e12dc0-dc3a-57b4-9c03-73dafd5e5358",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-53917 is fixed in version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-tooling."
      }
    },
    {
      "id": "CVE-2026-74761",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq.tooling/activemq-tooling@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b4a33638-f372-5c0e-9453-243ae03a30d8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-74761 affects version 6.1.6-tuxcare.2 of org.apache.activemq.tooling:activemq-tooling."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq.tooling/activemq-tooling@6.1.6-tuxcare.2"
    }
  ]
}