{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:307ad9be-1f7f-5af0-99a4-0e378e8a65b7",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "activemq-runtime-config",
      "purl": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.1",
      "type": "library",
      "group": "org.apache.activemq",
      "bom-ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.1",
      "version": "6.1.6-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "activemq-runtime-config",
            "purl": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6",
            "type": "library",
            "group": "org.apache.activemq",
            "version": "6.1.6"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-66168",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e0d992f6-f5cb-5048-8cb6-9ab6a78803dd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66168 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2026-33227",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e31f9bfc-8332-5c6c-b95d-595dd0d33e03",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33227 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2026-34197",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1666d019-00c0-570c-a38a-ca1047808dc6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34197 is fixed in version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2026-39304",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9bcff1b6-afcf-5272-ae9e-f926291947ac",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39304 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2026-40046",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7084dffd-98e2-55e0-a71a-82362aefa2d5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40046 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2026-40466",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:91675365-631b-5d7b-b8a3-63554303e197",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40466 is fixed in version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2026-41043",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:40046781-3c07-5345-9525-4c3328707e87",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41043 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2026-41044",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bb4dd430-7e4f-51ac-9aec-4c567eea831f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41044 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2026-42253",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d38778a3-a015-5125-8a36-de94903be02e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42253 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2026-42588",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:64656516-c23e-528a-a0ea-41cd6882aa94",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42588 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2026-45505",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:683dc1b0-0bf4-59db-afbe-1afdb1e674a0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45505 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2026-46605",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:861827e8-7e9c-5377-8b2f-a243161a0ed9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-46605 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-runtime-config, and is fixed in 6.1.6-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-49157",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1c79ff76-eb06-5dcd-850a-e2dbc3306937",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49157 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2026-49270",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:548b19fd-167e-59a8-8607-cc57fe668e4e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49270 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2026-50734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:34554c8a-333c-543a-a1a2-78676ea61573",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50734 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-runtime-config."
      }
    },
    {
      "id": "CVE-2026-53917",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9c4ba346-038e-539a-b592-1a92dfbc0d98",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53917 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-runtime-config, and is fixed in 6.1.6-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-74761",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fb95cee5-c43e-542a-bed4-db6ee55d1db4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-74761 affects version 6.1.6-tuxcare.1 of org.apache.activemq:activemq-runtime-config."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq/activemq-runtime-config@6.1.6-tuxcare.1"
    }
  ]
}