{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e77e39a6-ec9f-543b-9128-6390c021fabd",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.4.5-tuxcare.1",
      "type": "library",
      "group": "org.apache.cxf",
      "name": "cxf-tools-misctools",
      "version": "3.4.5-tuxcare.1",
      "purl": "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.4.5-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:8178134f-982f-5635-8977-24132a541d3e",
      "id": "CVE-2022-46363",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-46363 is fixed in version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-misctools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:582e82a2-a6e6-5870-8d73-d835bd3bb46f",
      "id": "CVE-2022-46364",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-46364 is fixed in version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-misctools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:651b5dad-5cd0-5042-86bb-447886c2dba7",
      "id": "CVE-2024-28752",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-28752 is fixed in version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-misctools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93f0106b-075d-5f4f-8ffd-3ddaf825e453",
      "id": "CVE-2024-29736",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29736 is fixed in version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-misctools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb4bdcb5-857a-5c54-b74b-dcc9363ed908",
      "id": "CVE-2024-32007",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-32007 is fixed in version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-misctools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02e813aa-9119-5531-90c6-d3e5433d2933",
      "id": "CVE-2025-23184",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-23184 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-misctools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04d5b670-fd7e-53b2-a5f0-b58d932ecce2",
      "id": "CVE-2025-48795",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-48795 does not affect version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-misctools. not_affected \u2014 Version 3.4.5 does not contain the vulnerable code path. The CVE-2025-48795 vulnerability exists in DelayedCachedOutputStreamCleaner class which was introduced in version 3.5.11 (September 2024). Version 3.4.5 predates this component and lacks the leak detection logging mechanism that causes the vulnerability."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64e08b6f-688a-5835-8f29-aeaed6ddebdd",
      "id": "CVE-2025-48913",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48913 is fixed in version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-misctools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca432907-a6ad-5f7c-9ce5-f731ae5a7c16",
      "id": "CVE-2026-44417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44417 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-misctools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1396401e-1a33-55c2-a1db-e697684a1983",
      "id": "CVE-2026-44618",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44618 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-misctools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61baebd0-c30c-533a-b122-d198c0a2bc07",
      "id": "CVE-2026-44930",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44930 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-misctools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb2a55d1-44e2-5289-9922-5e5a8e007558",
      "id": "CVE-2026-49875",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49875 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-misctools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2d2a52f-f9fa-568b-be7d-c470560b7511",
      "id": "CVE-2026-50623",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50623 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-misctools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd982943-24d7-5ebb-8a39-0dcf34691af2",
      "id": "CVE-2026-50627",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50627 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-misctools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96660bce-1da3-50d5-8d59-b8d1ae87450f",
      "id": "CVE-2026-50628",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50628 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-misctools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84ececc9-5918-5e7c-bd2d-69c812caeca4",
      "id": "CVE-2026-50629",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50629 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-misctools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4694f9b0-9ea0-5b57-9125-24dc6084317e",
      "id": "CVE-2026-50630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50630 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-misctools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5417a2cd-b7ac-597d-9f3f-cec42d85e3ae",
      "id": "CVE-2026-50631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50631 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-misctools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb54e57d-87a0-56f4-a9b6-756fbeaec81c",
      "id": "CVE-2026-50632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50632 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-misctools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f928687-6421-5ac4-920a-37298ea1e56d",
      "id": "CVE-2026-50633",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50633 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-misctools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad9738c1-5d71-5c14-bcff-c5f17a914789",
      "id": "CVE-2026-50634",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50634 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-misctools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16807688-4dcc-5cb5-a05c-f73b6d38cc36",
      "id": "CVE-2026-50645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50645 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-misctools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.4.5-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.4.5-tuxcare.1"
    }
  ]
}