{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:74632ff8-9dc5-5c35-b306-3ed9fc2a258f",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "undertow-servlet",
      "purl": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1",
      "type": "library",
      "group": "io.undertow",
      "bom-ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1",
      "version": "2.0.26.Final-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2019-14888",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:df434fa2-28f2-5cdc-8566-5ed7221387ca",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-14888 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2020-10687",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:26dc427d-afc9-5c0f-855c-e8b5a4ef2cf8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10687 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2020-10705",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:100d817c-3c9e-5b50-acf0-245d73c368d0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10705 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2020-10719",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b2f5b804-3374-5234-ace3-6797e117feb0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-10719 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2020-1745",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:95071116-cad9-563e-b0c8-57444e853780",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-1745 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2020-1757",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d5c3028c-d811-58b9-8403-751e133977b0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-1757 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2020-27782",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4e72a140-edb6-5262-80fc-0062ff542a95",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-27782 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2021-20220",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9a4918fa-8390-5ea5-93b8-b5f2022f5d70",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-20220 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2021-3597",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b24709b9-854b-5e5d-b34c-bb9cac5941ce",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3597 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2021-3629",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a49d59af-abcf-52a4-8a0d-deccb7ac95b0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3629 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2021-3690",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:437ed943-affa-5fad-990e-f5a00a966fbc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3690 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2021-3859",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2fd137d4-8ffd-546f-a478-e90154cb6b8a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-3859 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2022-2053",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aeb348a6-9b54-59ad-8b90-3bb5b5603edb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-2053 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2022-4492",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:23d6df5c-6678-5023-8aa3-87585ea93881",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-4492 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2023-1108",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0de9f66b-b4f9-5b20-a989-04e47a2e69c7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-1108 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2023-1973",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d4198ba7-f374-59f6-89de-e672f569766d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-1973 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2023-3223",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ac93fd0c-f083-50f9-8c29-a330973aafcc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-3223 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2023-4639",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:05b8728a-f2cb-505f-811d-7dc491ce6043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-4639 is fixed in version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2024-1459",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8dedb1ba-a597-5922-bc29-4f6ff8e54ac3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-1459 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2024-1635",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3f488e83-41f1-5db6-8c94-98a11f9c54a4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-1635 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2024-3653",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d14b93fa-c6ae-5a08-8105-902093b7387a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-3653 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2024-3884",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e42ea8ad-8332-5f28-8632-aa5bc851b98a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-3884 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2024-4027",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0cb162d7-f180-56ef-b6c3-0547e5f7822d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-4027 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2024-4109",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:87793577-018a-52a9-a483-93c00191c7ce",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2024-4109 is a false positive for io.undertow:undertow-servlet 2.0.26.Final-tuxcare.1."
      }
    },
    {
      "id": "CVE-2024-5971",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f9078d21-1d93-5087-a31f-f9d55d07258f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-5971 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2024-6162",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6a1b2986-8d23-50f6-8049-1622ddf0c505",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-6162 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2024-7885",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:de2aeb20-1c4b-5cea-acfe-295ac60eee06",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-7885 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2025-12543",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2e3ba669-1635-50b7-9a2b-3684cccddb0d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-12543 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2025-9784",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e461b6aa-6de0-5625-9553-44951bbb6ca9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-9784 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2026-28367",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:699e7b9c-deea-5be5-80d7-37899e89431c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-28367 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2026-28368",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b856ffe1-2d20-5ee6-a064-8c76c2ba8d90",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-28368 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2026-28369",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5a8a0245-a08a-5b77-8647-2b7e7421068f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-28369 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    },
    {
      "id": "CVE-2026-3260",
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a23de73e-0a85-594a-9b64-a272b0456dc6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-3260 affects version 2.0.26.Final-tuxcare.1 of io.undertow:undertow-servlet."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.undertow/undertow-servlet@2.0.26.Final-tuxcare.1"
    }
  ]
}