{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:536108e4-0724-59ca-8be4-2d8cde106f13",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.kafka/kafka-raft@3.2.3-tuxcare.4",
      "type": "library",
      "group": "org.apache.kafka",
      "name": "kafka-raft",
      "version": "3.2.3-tuxcare.4",
      "purl": "pkg:maven/org.apache.kafka/kafka-raft@3.2.3-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:17dd83dd-5a5f-5477-ab88-a002bb8f4327",
      "id": "CVE-2023-25194",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-25194 is fixed in version 3.2.3-tuxcare.4 of org.apache.kafka:kafka-raft."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.kafka/kafka-raft@3.2.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d6f0f24-4bc0-58cc-bcb2-5b098b3dfc29",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-31141 is fixed in version 3.2.3-tuxcare.4 of org.apache.kafka:kafka-raft."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.kafka/kafka-raft@3.2.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51d48141-34d8-5677-b479-a3d6f82b028f",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56128 is fixed in version 3.2.3-tuxcare.4 of org.apache.kafka:kafka-raft."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.kafka/kafka-raft@3.2.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9e8085d-f4e3-5d68-902b-4763bed350b5",
      "id": "CVE-2025-27817",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-27817 is fixed in version 3.2.3-tuxcare.4 of org.apache.kafka:kafka-raft."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.kafka/kafka-raft@3.2.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29897e57-cefe-5ef5-bc10-dc51cd5b4073",
      "id": "CVE-2025-27818",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-27818 is fixed in version 3.2.3-tuxcare.4 of org.apache.kafka:kafka-raft."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.kafka/kafka-raft@3.2.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04feccf8-a907-52eb-a17e-70da8758c07d",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-27819 is fixed in version 3.2.3-tuxcare.4 of org.apache.kafka:kafka-raft."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.kafka/kafka-raft@3.2.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ada9d551-da61-5297-b167-11456020f34e",
      "id": "CVE-2026-33558",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33558 affects version 3.2.3-tuxcare.4 of org.apache.kafka:kafka-raft."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.kafka/kafka-raft@3.2.3-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8dee6e59-361e-5910-991f-55f440acc0c1",
      "id": "CVE-2026-35554",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-35554 affects version 3.2.3-tuxcare.4 of org.apache.kafka:kafka-raft."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.kafka/kafka-raft@3.2.3-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.kafka/kafka-raft@3.2.3-tuxcare.4"
    }
  ]
}