{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:41314711-17ff-5943-aa23-cd7f4e0b1df1",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "zookeeper",
      "purl": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.5-tuxcare.1",
      "type": "library",
      "group": "org.apache.zookeeper",
      "bom-ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.5-tuxcare.1",
      "version": "3.5.5-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2023-44981",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f12cc607-24dd-5b4a-ba1b-7d6b6f1a4f77",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44981 affects version 3.5.5-tuxcare.1 of org.apache.zookeeper:zookeeper."
      }
    },
    {
      "id": "CVE-2024-23944",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:867931d4-1b6a-5ed1-94c9-f4ae38430a9f",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2024-23944 does not affect version 3.5.5-tuxcare.1 of org.apache.zookeeper:zookeeper. not_affected \u2014 ZooKeeper 3.5.5 is not affected by CVE-2024-23944. This vulnerability is specific to persistent watchers (addWatch command with PERSISTENT/PERSISTENT_RECURSIVE modes), which were introduced in ZooKeeper 3.6.0 on November 8, 2019\u2014seven months after version 3.5.5 was released on April 2, 2019. While the underlying code pattern (watch event delivery without ACL checks in NIOServerCnxn.process() an...",
        "justification": "code_not_present"
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.5-tuxcare.1"
    }
  ]
}