{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4e641742-8e55-5d3a-831e-fea44e77fa0e",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "xstream",
      "purl": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1",
      "type": "library",
      "group": "com.thoughtworks.xstream",
      "bom-ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1",
      "version": "1.2.2-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "xstream",
            "purl": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2",
            "type": "library",
            "group": "com.thoughtworks.xstream",
            "version": "1.2.2"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2013-7285",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:43e20b90-dea0-5ed1-b94b-1c5cb92b68a9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-7285 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream, and is fixed in 1.2.2-tuxcare.3."
      }
    },
    {
      "id": "CVE-2016-3674",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:231e8ccf-4c75-5907-9dbe-e32f073dbc06",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3674 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2017-7957",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8e176a6d-c4be-5b39-b1e3-0aaf379be740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7957 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2019-10173",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cd875699-0bd1-5ca7-bab0-7bc88f8a3580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10173 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2020-26217",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1d421cb1-429f-54ec-9d71-38534aebd1ef",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2020-26217 is fixed in version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2020-26258",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:66b892d7-754c-5e5e-a2cc-08d215f3309a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-26258 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2020-26259",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c248b885-b638-5305-aca8-bc2b03d2ca6d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-26259 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21341",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a271a54d-1889-5128-ae53-d8a9a38ac2e5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21341 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21342",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:eafdbe8d-adf8-594c-88a3-dd96674acf79",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21342 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21343",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:88d83f9e-0472-5e1c-ae10-eb04098f1f8e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21343 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21344",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:45e8d5c3-ac73-5fa3-ae18-b22d509f1714",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21344 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21345",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:899d29d2-26b4-5356-ae1f-ea69dc8933e5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21345 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21346",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:75e288ae-639b-56d8-855e-c7506bc1ea40",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21346 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21347",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2c5630d5-017a-5271-88fc-1354af4d160d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21347 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21348",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:752106ed-7e38-5381-859f-b73ac9fd00c1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21348 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21349",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cf38649e-bc04-57f8-a098-8eff537fcb55",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21349 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21350",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:819c158b-6b72-5243-87af-2392a0aef4df",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21350 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21351",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dbaafb27-b5a3-5d48-9c63-58aa7e9441ce",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21351 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-29505",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:42658161-9840-5ef2-9f66-3990ad33e982",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29505 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39139",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:67977881-48dc-54cf-8fa6-6f46a48183fa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39139 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39140",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:219b875c-e05f-503f-b8d8-5a424e662ae0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39140 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39141",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0846b4cd-a64b-580f-9288-cf7eb0b4e6a7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39141 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39144",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d5080fae-6237-5d03-9210-ba5103ce8f85",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39144 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39145",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f5be3f7f-912a-5cdb-ae33-a25d61e3976f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39145 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream, and is fixed in 1.2.2-tuxcare.2."
      }
    },
    {
      "id": "CVE-2021-39146",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c47fd2f4-0c7a-5b03-8b47-c4628ae1e518",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39146 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39147",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2f084ca5-add0-565a-a7b7-8cb69744051a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39147 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39148",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4d439c88-cc91-5c1d-9fb0-bd8c6f3341a6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39148 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39149",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:56055fa9-bd57-5d17-af61-57f21515b665",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39149 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39150",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7623d616-8f0c-5d7e-b323-89997dd2ed94",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39150 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39151",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4de13cb3-2c98-58aa-87ee-43f8a849246c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39151 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39152",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d62c3385-6e6e-5976-a944-0470fafebe1e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39152 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39153",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4d7d6ed3-5b23-54fd-9bc0-346400907c39",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39153 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39154",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9eb74750-91af-58b2-85f8-c72681cf87f7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39154 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-43859",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2c984314-d22e-5752-81c6-27158f014777",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-43859 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2022-40151",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fa57b8d2-0104-55a2-be92-ed0a2718b3bd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-40151 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2022-41966",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9d21505e-b3c3-5b38-a759-d88f7de96d0d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41966 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2024-47072",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b009eebb-f7ad-5830-9939-b6a8ecb2b8f7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47072 affects version 1.2.2-tuxcare.1 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "GHSA-3mq5-fq9h-gj7j",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aa9e0e4a-6445-5652-b1e2-a7f8a1c56ba9",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-3mq5-fq9h-gj7j is a false positive for com.thoughtworks.xstream:xstream 1.2.2-tuxcare.1."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.1"
    }
  ]
}