{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2d4865c6-7a2e-52f3-8acf-e1def5f0378f",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "amqp-client",
      "purl": "pkg:maven/com.rabbitmq/amqp-client@5.13.1-tuxcare.2",
      "type": "library",
      "group": "com.rabbitmq",
      "bom-ref": "pkg:maven/com.rabbitmq/amqp-client@5.13.1-tuxcare.2",
      "version": "5.13.1-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "amqp-client",
            "purl": "pkg:maven/com.rabbitmq/amqp-client@5.13.1",
            "type": "library",
            "group": "com.rabbitmq",
            "version": "5.13.1"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2018-11087",
      "affects": [
        {
          "ref": "pkg:maven/com.rabbitmq/amqp-client@5.13.1-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f95125ca-88e0-5691-88e3-1045297a16c6",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11087 does not affect version 5.13.1-tuxcare.2 of com.rabbitmq:amqp-client. not_affected \u2014 CVE-2018-11087 affects Spring AMQP due to lack of hostname verification in its dependency rabbitmq-java-client (amqp-client). The target repository is rabbitmq-java-client version 5.13.1-tuxcare.1. The hostname verification fix was added in upstream commit 09a5334f (Aug 2018) for version 5.4.0, introducing SocketConfigurators.ENABLE_HOSTNAME_VERIFICATION and ConnectionFactory.enableHostnameVeri...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2023-46120",
      "affects": [
        {
          "ref": "pkg:maven/com.rabbitmq/amqp-client@5.13.1-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6ea57d20-6fb5-5256-a7ee-5fd211d8a758",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46120 affects version 5.13.1-tuxcare.2 of com.rabbitmq:amqp-client."
      }
    },
    {
      "id": "CVE-2026-106121",
      "affects": [
        {
          "ref": "pkg:maven/com.rabbitmq/amqp-client@5.13.1-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4cb42af7-f0da-5864-bbc7-222238a52c22",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-106121 affects version 5.13.1-tuxcare.2 of com.rabbitmq:amqp-client."
      }
    },
    {
      "id": "CVE-2026-106122",
      "affects": [
        {
          "ref": "pkg:maven/com.rabbitmq/amqp-client@5.13.1-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6309cd56-10ff-5c87-9526-cd73e4822b4b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-106122 affects version 5.13.1-tuxcare.2 of com.rabbitmq:amqp-client."
      }
    },
    {
      "id": "CVE-2026-106123",
      "affects": [
        {
          "ref": "pkg:maven/com.rabbitmq/amqp-client@5.13.1-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6431e65b-53c9-5066-9500-d6103bb3824a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-106123 affects version 5.13.1-tuxcare.2 of com.rabbitmq:amqp-client."
      }
    },
    {
      "id": "CVE-2026-61634",
      "affects": [
        {
          "ref": "pkg:maven/com.rabbitmq/amqp-client@5.13.1-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:148de979-98c2-5424-92d6-adc0e3c0cb31",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-61634 affects version 5.13.1-tuxcare.2 of com.rabbitmq:amqp-client."
      }
    },
    {
      "id": "CVE-2026-63335",
      "affects": [
        {
          "ref": "pkg:maven/com.rabbitmq/amqp-client@5.13.1-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d36b149e-3391-5709-9490-e76e58237d36",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-63335 is fixed in version 5.13.1-tuxcare.2 of com.rabbitmq:amqp-client."
      }
    },
    {
      "id": "CVE-2026-63336",
      "affects": [
        {
          "ref": "pkg:maven/com.rabbitmq/amqp-client@5.13.1-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e063cafa-92c1-543c-b541-779523a98b57",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-63336 is fixed in version 5.13.1-tuxcare.2 of com.rabbitmq:amqp-client."
      }
    },
    {
      "id": "CVE-2026-63337",
      "affects": [
        {
          "ref": "pkg:maven/com.rabbitmq/amqp-client@5.13.1-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f0dc4fa6-3ad3-5805-8968-27d83d7244d7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-63337 is fixed in version 5.13.1-tuxcare.2 of com.rabbitmq:amqp-client."
      }
    },
    {
      "id": "CVE-2026-69219",
      "affects": [
        {
          "ref": "pkg:maven/com.rabbitmq/amqp-client@5.13.1-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e8b10716-4bd6-525b-9f0e-729cad797f85",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69219 is fixed in version 5.13.1-tuxcare.2 of com.rabbitmq:amqp-client."
      }
    },
    {
      "id": "CVE-2026-69220",
      "affects": [
        {
          "ref": "pkg:maven/com.rabbitmq/amqp-client@5.13.1-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:97427074-72f8-5a9c-891f-cb8c7bb8df28",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69220 affects version 5.13.1-tuxcare.2 of com.rabbitmq:amqp-client."
      }
    },
    {
      "id": "CVE-2026-75516",
      "affects": [
        {
          "ref": "pkg:maven/com.rabbitmq/amqp-client@5.13.1-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8e3dbeef-7396-54ac-88af-9a30aaa0313f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-75516 affects version 5.13.1-tuxcare.2 of com.rabbitmq:amqp-client."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/com.rabbitmq/amqp-client@5.13.1-tuxcare.2"
    }
  ]
}