{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b293bb16-1780-5e7e-95a1-455816ec28be",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1",
      "type": "library",
      "group": "org.apache.cxf",
      "name": "cxf-tools-validator",
      "version": "3.4.5-tuxcare.1",
      "purl": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:fcceab9e-9a38-5760-a955-42e4d2435ff4",
      "id": "CVE-2022-46363",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-46363 is fixed in version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:325fe16c-430b-5ce0-bf0e-1cc40768273d",
      "id": "CVE-2022-46364",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-46364 is fixed in version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4ae7db9-a76b-55e4-a10a-a894587253f9",
      "id": "CVE-2024-28752",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-28752 is fixed in version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c2956c6-a103-5e52-859d-ae64c419d103",
      "id": "CVE-2024-29736",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29736 is fixed in version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:470a995a-f7ea-57b2-8741-cf149b985de4",
      "id": "CVE-2024-32007",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-32007 is fixed in version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d086cad-ff42-5ae8-978c-a66d54c12318",
      "id": "CVE-2025-23184",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-23184 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a70f9ec5-cb00-5f2b-863f-6da7c149eb9e",
      "id": "CVE-2025-48795",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-48795 does not affect version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator. not_affected \u2014 Version 3.4.5 does not contain the vulnerable code path. The CVE-2025-48795 vulnerability exists in DelayedCachedOutputStreamCleaner class which was introduced in version 3.5.11 (September 2024). Version 3.4.5 predates this component and lacks the leak detection logging mechanism that causes the vulnerability."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8b21f8b-53ab-5278-aa6f-ef09167ec513",
      "id": "CVE-2025-48913",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48913 is fixed in version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f4ac209-fc52-52c9-88b7-5bec971729d4",
      "id": "CVE-2026-44417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44417 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d7ee2fb-5047-533e-bff9-9ad60c577abc",
      "id": "CVE-2026-44618",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44618 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ae1f354-4ba1-5939-a40e-6a3d40e9c5f8",
      "id": "CVE-2026-44930",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44930 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:995acd1d-4f4c-5299-b156-1154addd8428",
      "id": "CVE-2026-49875",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49875 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a489f270-70ad-5efe-84a5-d5e4d850b425",
      "id": "CVE-2026-50623",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50623 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ac8258c-9d53-5a17-bf1e-0966ef5ec321",
      "id": "CVE-2026-50627",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50627 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40b823c9-cc2b-5113-9180-10ffbffc3c20",
      "id": "CVE-2026-50628",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50628 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ae47186-1ddc-5854-ad6a-6bf8a2c87097",
      "id": "CVE-2026-50629",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50629 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:058ffcee-03ba-5153-bdbb-346d251f5e48",
      "id": "CVE-2026-50630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50630 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b22142a-8561-58d2-a4df-b705680f7d30",
      "id": "CVE-2026-50631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50631 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd56aeb2-612e-5cb6-992d-81d9c2d9d8f1",
      "id": "CVE-2026-50632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50632 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cba3aeee-5e81-5e91-9ad7-703ad8054df6",
      "id": "CVE-2026-50633",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50633 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d24c55d-ad31-59ca-9b3b-092a38a322f2",
      "id": "CVE-2026-50634",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50634 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5da7e9db-55f1-5d20-9b29-0df063612707",
      "id": "CVE-2026-50645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50645 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-tools-validator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@3.4.5-tuxcare.1"
    }
  ]
}