{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:28966a3d-a5a8-58a1-a0a1-2ad2b23eadd1",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.undertow/undertow-core@2.2.33.Final-tuxcare.6",
      "type": "library",
      "group": "io.undertow",
      "name": "undertow-core",
      "version": "2.2.33.Final-tuxcare.6",
      "purl": "pkg:maven/io.undertow/undertow-core@2.2.33.Final-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:9e1a0c08-df43-5ec1-85cf-242d46e91393",
      "id": "CVE-2024-3653",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-3653 is fixed in version 2.2.33.Final-tuxcare.6 of io.undertow:undertow-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.2.33.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:372eb4a6-0ebd-5044-8122-bace8d507d7c",
      "id": "CVE-2024-3884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-3884 affects version 2.2.33.Final-tuxcare.6 of io.undertow:undertow-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.2.33.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e18ceef-6101-57c5-ae9a-6c71c88af80f",
      "id": "CVE-2024-4027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-4027 affects version 2.2.33.Final-tuxcare.6 of io.undertow:undertow-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.2.33.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ede7516d-efb0-54d2-a243-0b317a93488f",
      "id": "CVE-2024-4109",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2024-4109 is a false positive for io.undertow:undertow-core 2.2.33.Final-tuxcare.6."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.2.33.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b730e20-5fef-5050-9782-66c059195396",
      "id": "CVE-2024-5971",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-5971 is fixed in version 2.2.33.Final-tuxcare.6 of io.undertow:undertow-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.2.33.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebb197c0-3e1c-5d78-97c2-8c19f6847df8",
      "id": "CVE-2024-7885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-7885 is fixed in version 2.2.33.Final-tuxcare.6 of io.undertow:undertow-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.2.33.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ba06531-e598-5dda-b5a6-382378d65652",
      "id": "CVE-2025-12543",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-12543 is fixed in version 2.2.33.Final-tuxcare.6 of io.undertow:undertow-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.2.33.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f99dfde1-ee6d-518c-bb34-ab11f56d343e",
      "id": "CVE-2025-9784",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-9784 affects version 2.2.33.Final-tuxcare.6 of io.undertow:undertow-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.2.33.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9f6c919-94be-5ba4-a6c7-963375b52cb2",
      "id": "CVE-2026-28367",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-28367 affects version 2.2.33.Final-tuxcare.6 of io.undertow:undertow-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.2.33.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d91fa14-839e-50fa-abad-3ffffc7f4f5b",
      "id": "CVE-2026-28368",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-28368 affects version 2.2.33.Final-tuxcare.6 of io.undertow:undertow-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.2.33.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9bd357e6-e63d-5396-a922-36f322619a6e",
      "id": "CVE-2026-28369",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-28369 affects version 2.2.33.Final-tuxcare.6 of io.undertow:undertow-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.2.33.Final-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06130f08-9306-52d9-ad80-08e359c247e2",
      "id": "CVE-2026-3260",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-3260 is fixed in version 2.2.33.Final-tuxcare.6 of io.undertow:undertow-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-core@2.2.33.Final-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.undertow/undertow-core@2.2.33.Final-tuxcare.6"
    }
  ]
}