{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e1647fff-0b1a-5ea0-bddd-952f069ba22c",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.kafka/connect-api@3.2.3-tuxcare.3",
      "type": "library",
      "group": "org.apache.kafka",
      "name": "connect-api",
      "version": "3.2.3-tuxcare.3",
      "purl": "pkg:maven/org.apache.kafka/connect-api@3.2.3-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:a59dd24d-b3b7-5461-8215-160e896f65aa",
      "id": "CVE-2023-25194",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-25194 is fixed in version 3.2.3-tuxcare.3 of org.apache.kafka:connect-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.kafka/connect-api@3.2.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ce49139-53b7-5a5c-afd0-b4634d472810",
      "id": "CVE-2024-31141",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-31141 is fixed in version 3.2.3-tuxcare.3 of org.apache.kafka:connect-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.kafka/connect-api@3.2.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d54ed13c-7118-5bfc-8d6d-d91957b31f79",
      "id": "CVE-2024-56128",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56128 is fixed in version 3.2.3-tuxcare.3 of org.apache.kafka:connect-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.kafka/connect-api@3.2.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9cb0adcd-7d04-5a22-8adc-accabe081b0a",
      "id": "CVE-2025-27817",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-27817 is fixed in version 3.2.3-tuxcare.3 of org.apache.kafka:connect-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.kafka/connect-api@3.2.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4234eb19-7150-52a3-9b30-1b5a2f95c5e6",
      "id": "CVE-2025-27818",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-27818 is fixed in version 3.2.3-tuxcare.3 of org.apache.kafka:connect-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.kafka/connect-api@3.2.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d01341f6-0e03-5ca2-b94d-eb41b32a64d3",
      "id": "CVE-2025-27819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-27819 is fixed in version 3.2.3-tuxcare.3 of org.apache.kafka:connect-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.kafka/connect-api@3.2.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:469e8356-5852-584e-990e-579194f17707",
      "id": "CVE-2026-33558",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33558 affects version 3.2.3-tuxcare.3 of org.apache.kafka:connect-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.kafka/connect-api@3.2.3-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fd77535-9e5e-5a3c-9cc2-b9a16a04e5ef",
      "id": "CVE-2026-35554",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-35554 affects version 3.2.3-tuxcare.3 of org.apache.kafka:connect-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.kafka/connect-api@3.2.3-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.kafka/connect-api@3.2.3-tuxcare.3"
    }
  ]
}