{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7f45b285-138b-5b02-8458-644ed1a45a61",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.kafka/streams-quickstart-java@2.8.2-tuxcare.4",
      "type": "library",
      "group": "org.apache.kafka",
      "name": "streams-quickstart-java",
      "version": "2.8.2-tuxcare.4",
      "purl": "pkg:maven/org.apache.kafka/streams-quickstart-java@2.8.2-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:5ced7179-944c-55bb-9d92-d14521c4a001",
      "id": "CVE-2023-25194",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-25194 is fixed in version 2.8.2-tuxcare.4 of org.apache.kafka:streams-quickstart-java."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.kafka/streams-quickstart-java@2.8.2-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ea800d9-8c34-5067-9f51-7f96d42dd394",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31141 affects version 2.8.2-tuxcare.4 of org.apache.kafka:streams-quickstart-java."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.kafka/streams-quickstart-java@2.8.2-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81d38787-66fa-5fcd-b549-5e9af6c36af4",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56128 is fixed in version 2.8.2-tuxcare.4 of org.apache.kafka:streams-quickstart-java."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.kafka/streams-quickstart-java@2.8.2-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:373deddb-1f06-52c0-b437-9ea48ea2b605",
      "id": "CVE-2025-27818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27818 affects version 2.8.2-tuxcare.4 of org.apache.kafka:streams-quickstart-java."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.kafka/streams-quickstart-java@2.8.2-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e36c440a-69b1-575d-9a65-ccbbee138282",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-27819 is fixed in version 2.8.2-tuxcare.4 of org.apache.kafka:streams-quickstart-java."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.kafka/streams-quickstart-java@2.8.2-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa2889b7-cfe9-54a4-99e4-0763c5694902",
      "id": "CVE-2026-33558",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33558 affects version 2.8.2-tuxcare.4 of org.apache.kafka:streams-quickstart-java."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.kafka/streams-quickstart-java@2.8.2-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b40ec6ce-6b33-5c73-b625-6fc6fcd22a40",
      "id": "CVE-2026-35554",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-35554 affects version 2.8.2-tuxcare.4 of org.apache.kafka:streams-quickstart-java."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.kafka/streams-quickstart-java@2.8.2-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.kafka/streams-quickstart-java@2.8.2-tuxcare.4"
    }
  ]
}