{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b26279f2-12ec-53ba-b3e1-e3295be27530",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.2.24.Final-tuxcare.1",
      "type": "library",
      "group": "io.undertow",
      "name": "undertow-websockets-jsr",
      "version": "2.2.24.Final-tuxcare.1",
      "purl": "pkg:maven/io.undertow/undertow-websockets-jsr@2.2.24.Final-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:b2167b66-ec5f-5b7e-bffb-65a280e4092f",
      "id": "CVE-2023-1973",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-1973 is fixed in version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-websockets-jsr."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.2.24.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44e2a9bb-20ff-5ed5-9653-b8b40757dda6",
      "id": "CVE-2023-4639",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-4639 is fixed in version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-websockets-jsr."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.2.24.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eff306c4-8179-5378-888b-c553b7225f92",
      "id": "CVE-2024-1459",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-1459 is fixed in version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-websockets-jsr."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.2.24.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65af6594-86c2-5c4c-83d6-9ea6f4d2d6d2",
      "id": "CVE-2024-1635",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-1635 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-websockets-jsr."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.2.24.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98e0027e-2646-59a1-b8ba-013bd885828b",
      "id": "CVE-2024-3653",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-3653 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-websockets-jsr."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.2.24.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68c6ca21-7b2a-5a2e-ad72-4c477382fa22",
      "id": "CVE-2024-3884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-3884 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-websockets-jsr."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.2.24.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d5467f2-3c37-564d-91a2-dc9ba0fa0e42",
      "id": "CVE-2024-4027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-4027 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-websockets-jsr."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.2.24.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb45d5ae-7216-59f4-8da2-6210d3868486",
      "id": "CVE-2024-4109",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2024-4109 is a false positive for io.undertow:undertow-websockets-jsr 2.2.24.Final-tuxcare.1."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.2.24.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2abf30e1-fff9-53a6-9949-3ea4acef33b2",
      "id": "CVE-2024-5971",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-5971 is fixed in version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-websockets-jsr."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.2.24.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33e1bdff-eeb6-5c57-9a76-9a7bfc050735",
      "id": "CVE-2024-6162",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-6162 is fixed in version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-websockets-jsr."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.2.24.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa92d61f-a028-5eda-9984-b540ff4c0fbe",
      "id": "CVE-2024-7885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-7885 is fixed in version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-websockets-jsr."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.2.24.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ea532eb-dfea-5e4d-a1a5-6c8c825302ed",
      "id": "CVE-2025-12543",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-12543 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-websockets-jsr."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.2.24.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:833469f9-4755-5657-8e6c-2cb43b10648b",
      "id": "CVE-2025-9784",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-9784 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-websockets-jsr."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.2.24.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85ef47f7-0670-5523-8430-44431db8190c",
      "id": "CVE-2026-28367",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-28367 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-websockets-jsr."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.2.24.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3d92c58-fa41-5c9b-8454-bae8b1625aad",
      "id": "CVE-2026-28368",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-28368 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-websockets-jsr."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.2.24.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7599453-3b15-5adc-81ab-0531fbe07734",
      "id": "CVE-2026-28369",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-28369 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-websockets-jsr."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.2.24.Final-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c276f062-8eba-527c-a19e-3ea5ee585558",
      "id": "CVE-2026-3260",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-3260 affects version 2.2.24.Final-tuxcare.1 of io.undertow:undertow-websockets-jsr."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.2.24.Final-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.2.24.Final-tuxcare.1"
    }
  ]
}