{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6f0a9b10-ff56-5507-ab83-7dbf6ba23d44",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.hive/hive-hplsql@2.3.9-tuxcare.3",
      "type": "library",
      "group": "org.apache.hive",
      "name": "hive-hplsql",
      "version": "2.3.9-tuxcare.3",
      "purl": "pkg:maven/org.apache.hive/hive-hplsql@2.3.9-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:1e335931-38c9-5fac-a6da-364dc9121ed4",
      "id": "CVE-2021-34538",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-34538 is fixed in version 2.3.9-tuxcare.3 of org.apache.hive:hive-hplsql."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hive/hive-hplsql@2.3.9-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9e24deb-b2e5-5645-a592-31244d4f0aa7",
      "id": "CVE-2024-23945",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23945 affects version 2.3.9-tuxcare.3 of org.apache.hive:hive-hplsql."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hive/hive-hplsql@2.3.9-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9fd1ea57-d6a1-5be3-8ec7-89ff349644d0",
      "id": "CVE-2024-23953",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23953 affects version 2.3.9-tuxcare.3 of org.apache.hive:hive-hplsql."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hive/hive-hplsql@2.3.9-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83f19364-3075-59a3-9a85-6d5f87dc521e",
      "id": "CVE-2024-29869",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29869 is fixed in version 2.3.9-tuxcare.3 of org.apache.hive:hive-hplsql."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hive/hive-hplsql@2.3.9-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a94d59f-d75d-59c7-a73f-54e2f104c48a",
      "id": "CVE-2024-45384",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-45384 affects version 2.3.9-tuxcare.3 of org.apache.hive:hive-hplsql."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hive/hive-hplsql@2.3.9-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:befeca0d-fd67-528a-b8f5-54b468365648",
      "id": "CVE-2024-45537",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-45537 affects version 2.3.9-tuxcare.3 of org.apache.hive:hive-hplsql."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hive/hive-hplsql@2.3.9-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20d1ccbe-b72b-52be-bacc-1c9cbdd06035",
      "id": "CVE-2025-27888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27888 affects version 2.3.9-tuxcare.3 of org.apache.hive:hive-hplsql."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hive/hive-hplsql@2.3.9-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:078791f3-5e33-5138-95a6-25ab0761f185",
      "id": "CVE-2025-59390",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59390 affects version 2.3.9-tuxcare.3 of org.apache.hive:hive-hplsql."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hive/hive-hplsql@2.3.9-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c413d796-9c94-57c2-b02c-e98598106580",
      "id": "CVE-2026-23906",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-23906 affects version 2.3.9-tuxcare.3 of org.apache.hive:hive-hplsql."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hive/hive-hplsql@2.3.9-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.hive/hive-hplsql@2.3.9-tuxcare.3"
    }
  ]
}