{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e5ad2108-dbba-5817-869f-269d4b367409",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "xstream",
      "purl": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2",
      "type": "library",
      "group": "com.thoughtworks.xstream",
      "bom-ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2",
      "version": "1.2.2-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "xstream",
            "purl": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2",
            "type": "library",
            "group": "com.thoughtworks.xstream",
            "version": "1.2.2"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2013-7285",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:50d8dcf3-c78f-5c54-9cca-742826509eab",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-7285 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream, and is fixed in 1.2.2-tuxcare.3."
      }
    },
    {
      "id": "CVE-2016-3674",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f042e12a-5b96-5e9f-a3e7-f47ebd89c6f0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3674 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2017-7957",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:52e96824-9680-5f16-af31-5bbb9534b0bf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7957 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2019-10173",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c881fb1e-d5ca-5a7a-befa-8590cc487867",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10173 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2020-26217",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:300305e0-04e6-55f4-aea7-adeca302acff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2020-26217 is fixed in version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2020-26258",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:eb93da35-c6ba-5537-80fe-4b939c2d5d8b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-26258 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2020-26259",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1db61032-7ea9-571b-8a57-be4c5e62079c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-26259 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21341",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0de34efa-3f70-5d75-8aa7-c81c5c6d73ea",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21341 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21342",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:877b04cc-f4fb-5627-9fc2-dce03f976401",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21342 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21343",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:053287cb-e7ce-51ed-bae8-8cf2908a4a5c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21343 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21344",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1f2219ea-c0e4-528c-9724-931de92e78f5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21344 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21345",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:30657667-f407-5709-a511-83ac11f88897",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21345 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21346",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e632ffc8-5f4e-5d79-bbaa-e130ed3347b4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21346 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21347",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f2148d2f-9af1-5aa5-92e4-d7069e24c3fc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21347 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21348",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:636be925-e742-5101-b938-bb436d6d0643",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21348 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21349",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:98b41691-93ce-5a65-a556-2372cf4b0849",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21349 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21350",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:94064a04-67b9-5d0d-ba95-58fa05f2dbe3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21350 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21351",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:abd66e7d-31b6-52ca-b715-63f88239fd20",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21351 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-29505",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ed27efb5-7952-5962-94fe-0906a0e40836",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29505 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39139",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b572b370-9aca-502c-bb23-a28ae787242b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39139 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39140",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d25e7c78-370a-5c71-be98-83c069d66228",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39140 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39141",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d3d3e128-9311-50e7-aef4-fec642e5426e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39141 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39144",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f824e2ef-0492-5990-b7b6-f5d41b5ec304",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39144 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39145",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3bb02485-245a-5c7d-9333-c057fdd824b8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-39145 is fixed in version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39146",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:15f48865-d4cc-590a-b2aa-47a61f092d7f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39146 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39147",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b8ce351a-3e7a-50b3-8ae5-5c907e819789",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39147 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39148",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b4ea26e5-84b4-5c77-ab1a-a0e94cae8bb1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39148 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39149",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6e6dd2de-825b-503c-bee8-969e14888fc5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39149 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39150",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6258fe22-ae2f-5e35-8716-8705ad124e17",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39150 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39151",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:33c051d6-7709-564e-a4a1-87438ae2c20a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39151 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39152",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5b882324-1ea7-52d9-aab0-5ca1a431c607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39152 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39153",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ddaab511-422e-5d14-8009-a8ff1e87489b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39153 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39154",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1e2bcae0-c29b-5088-964b-3bfad6905a84",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39154 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-43859",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:47e6600a-e549-525d-a903-78e912a7eaac",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-43859 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2022-40151",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:00fa0f17-58d3-5792-b5e0-1f37c1a36b94",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-40151 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2022-41966",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c7db1896-dd3a-5f72-911d-c396a535d22a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41966 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2024-47072",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e940f9bc-7e22-5d8f-9be3-b24472c231de",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47072 affects version 1.2.2-tuxcare.2 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "GHSA-3mq5-fq9h-gj7j",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d1bc9877-a4ab-580f-9121-4fe60dc6c025",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-3mq5-fq9h-gj7j is a false positive for com.thoughtworks.xstream:xstream 1.2.2-tuxcare.2."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.2"
    }
  ]
}