{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e93f46ab-81af-57eb-aece-78103036f269",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "undertow-parent",
      "purl": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1",
      "type": "library",
      "group": "io.undertow",
      "bom-ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1",
      "version": "2.0.26.Final-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2019-14888",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4c18a3a7-690c-5599-afea-0486c6cfc2c6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-14888 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2020-10687",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4d8ff811-a71d-567b-a141-e940024f2347",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10687 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2020-10705",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4cba5b21-5bda-534d-a227-2f60d286879b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10705 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2020-10719",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:316f5583-1a31-5044-a0bc-9fdf82ce0950",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10719 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2020-1745",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a82b71e8-38d8-5cbc-93a6-3a9e289dcdb0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-1745 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2020-1757",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:edc8c882-a6b4-5820-8a7a-18a09df4ef87",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-1757 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2020-27782",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bfca1512-eed8-57b3-8e02-0293087991f0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27782 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2021-20220",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9489d6f9-b584-5832-ae7a-fb646f901871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-20220 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2021-3597",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e999d3b9-22f1-5e93-a977-e4829cfbac51",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3597 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2021-3629",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:293e2031-1ed5-5f8d-85aa-7cc1f5cc73cb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3629 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2021-3690",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:22642452-f5d3-51c0-85c3-d6b012505baf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3690 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2021-3859",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6036fcd4-31e5-5f45-b57d-3a4c5b6059ef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3859 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2022-2053",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d04186d3-ba55-55d4-b202-94c98747085a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-2053 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2022-4492",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5262bdcf-355c-5fce-91b6-f400a8f89416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-4492 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2023-1108",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7f7c928f-591c-5a1b-a12f-44c4da7a91d6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-1108 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2023-1973",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c199b178-48ae-5e62-97fc-557dc81e5f5e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-1973 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2023-3223",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ada8b25e-7056-596f-bf26-16a8a075fa6b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-3223 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2023-4639",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:207cb596-a40e-59a8-af60-bd285238c8ae",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-4639 is fixed in version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2024-1459",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5619d97d-03eb-507e-90bc-7e08e68a6630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-1459 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2024-1635",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ef0d4d4b-911b-543e-ad89-e46e8b25f998",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-1635 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2024-3653",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f89d9f5d-88e5-5bc6-aeef-b23780133269",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-3653 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2024-3884",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d0768c9f-b604-5c3f-a953-13191fc4e6c9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-3884 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2024-4027",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5c4d4a9d-20d9-52ff-bda5-58241b21b7e1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-4027 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2024-4109",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9db99f5d-52e5-54e9-b866-f824b17fa6c4",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2024-4109 is a false positive for io.undertow:undertow-parent 2.0.26.Final-tuxcare.1."
      }
    },
    {
      "id": "CVE-2024-5971",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8f0947e2-0c1f-5cc3-ab41-986af581b4e7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-5971 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2024-6162",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ed4bf30d-57dc-5d57-b134-995463854662",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6162 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2024-7885",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7ed0769e-6d01-5a48-baa3-88c78178d7ba",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-7885 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2025-12543",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d05a6a61-191b-531e-aa2e-ea39978a9122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-12543 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2025-9784",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fd859ab6-5913-5f84-9043-aebef9bf4c93",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-9784 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2026-28367",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9cb0e446-b564-5b5b-9129-1a7fd722f698",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-28367 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2026-28368",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:15bbb3fc-f3fe-5c4c-8218-c5c75772cce7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-28368 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2026-28369",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ae47ad58-8ef6-5b4a-9d7a-b223397d14fb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-28369 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    },
    {
      "id": "CVE-2026-3260",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:47f406b8-ddfd-5447-a05b-06e8e07bd36f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-3260 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-parent."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.undertow/undertow-parent@2.0.26.Final-tuxcare.1"
    }
  ]
}