{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b3462450-2740-5966-8261-72b00ff5696a",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "undertow-dist",
      "purl": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1",
      "type": "library",
      "group": "io.undertow",
      "bom-ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1",
      "version": "2.0.26.Final-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2019-14888",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0258bdf3-9f2d-50ea-9bda-03f59687f11c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-14888 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2020-10687",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a799b8c6-71e9-5dbd-b6d6-c1099497aa3d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10687 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2020-10705",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:75e59bf9-2150-5065-81ad-36b61de1b851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10705 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2020-10719",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9173e72a-4e30-5fd7-8e83-af7c1ca8d4a7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10719 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2020-1745",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d3beec74-e369-54ee-a767-5ca18fb66715",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-1745 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2020-1757",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4302faac-8923-5461-a714-f2148c5bbed5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-1757 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2020-27782",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:60b05651-4e2a-5082-ae32-20368f4a8b72",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27782 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2021-20220",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2bae23d9-7790-5c2d-8997-0b316e6ef0f5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-20220 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2021-3597",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c667bfdb-19f5-582a-9b51-6ed06a553b62",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3597 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2021-3629",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a56b76df-0892-5814-bcdc-1b853e115fc4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3629 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2021-3690",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fb571204-0ca4-54a4-9cf1-4d15862beb79",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3690 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2021-3859",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c719aa45-a3fd-546f-bc73-e4df52ce775e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3859 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2022-2053",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f7f6b8ff-2626-54cb-8478-ae8fa03850cc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-2053 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2022-4492",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4b6eebc0-db31-555d-a49e-2f36791a890f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-4492 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2023-1108",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:38eed000-8b4e-566b-8199-49d72df76cd7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-1108 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2023-1973",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:333699fa-9c72-5c72-ae72-d9871c14b0be",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-1973 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2023-3223",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:65c1021d-9b0c-59c4-a4d7-d11de6f1e02c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-3223 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2023-4639",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b191107a-6c94-54c9-b45c-c0e4ebeab20b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-4639 is fixed in version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2024-1459",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bdec9fcb-f7ba-5d80-8ac6-0873071aae61",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-1459 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2024-1635",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:01a74c0c-38d5-53f7-8425-1978f822e48c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-1635 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2024-3653",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0044b1a3-7590-5e8b-9ef3-5daf755761b3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-3653 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2024-3884",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:49d1cf10-fd02-5aea-983f-e75d3a3b8ba3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-3884 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2024-4027",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:62cc091b-e290-5892-a2b3-8a3b36141559",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-4027 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2024-4109",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5385747e-0549-5a8a-9976-c8b1c0fe1b37",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2024-4109 is a false positive for io.undertow:undertow-dist 2.0.26.Final-tuxcare.1."
      }
    },
    {
      "id": "CVE-2024-5971",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:698053a7-d58a-5a5c-9c8e-e6c268f58964",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-5971 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2024-6162",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:72bf0694-e656-5210-94c1-32933b9ed07c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6162 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2024-7885",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:24d657c8-406c-5bd4-950a-7df85f8858df",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-7885 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2025-12543",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e816e83c-5e79-523a-94b7-0598cd7fa1a9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-12543 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2025-9784",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:63e6999c-2e53-55d1-9bdf-994779a9719f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-9784 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2026-28367",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:35f53548-7ab8-5a4b-bc31-291d7dc5758c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-28367 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2026-28368",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:98bc8101-c684-5e4c-998e-74576924daec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-28368 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2026-28369",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3ae4a064-e46b-5f08-b598-3de4eb584751",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-28369 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    },
    {
      "id": "CVE-2026-3260",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:db7b767e-a6a1-5984-bee7-1bae97ec887a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-3260 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-dist."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.undertow/undertow-dist@2.0.26.Final-tuxcare.1"
    }
  ]
}