{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c75704cf-3d86-5078-b8cc-31244db34173",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.cxf/cxf-integration-jca@3.4.5-tuxcare.1",
      "type": "library",
      "group": "org.apache.cxf",
      "name": "cxf-integration-jca",
      "version": "3.4.5-tuxcare.1",
      "purl": "pkg:maven/org.apache.cxf/cxf-integration-jca@3.4.5-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:4679ff4d-622e-59f0-a4ee-2acdebc3811c",
      "id": "CVE-2022-46363",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-46363 is fixed in version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-integration-jca."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-integration-jca@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26a5644c-5f33-5083-8749-454167470974",
      "id": "CVE-2022-46364",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-46364 is fixed in version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-integration-jca."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-integration-jca@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:246681c9-3bae-5180-bc26-a314aa9bf379",
      "id": "CVE-2024-28752",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-28752 is fixed in version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-integration-jca."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-integration-jca@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5f1f245-2f66-55b0-95ea-d8a69dd7f3df",
      "id": "CVE-2024-29736",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-29736 is fixed in version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-integration-jca."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-integration-jca@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1c1cf45-0cda-535d-a305-c26936e8d7d5",
      "id": "CVE-2024-32007",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-32007 is fixed in version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-integration-jca."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-integration-jca@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24d3ca56-a04f-587e-9132-b3192cb1d19f",
      "id": "CVE-2025-23184",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-23184 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-integration-jca."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-integration-jca@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7134122c-02e8-5f99-8a0c-571603fed673",
      "id": "CVE-2025-48795",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-48795 does not affect version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-integration-jca. not_affected \u2014 Version 3.4.5 does not contain the vulnerable code path. The CVE-2025-48795 vulnerability exists in DelayedCachedOutputStreamCleaner class which was introduced in version 3.5.11 (September 2024). Version 3.4.5 predates this component and lacks the leak detection logging mechanism that causes the vulnerability."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-integration-jca@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9694df97-59ca-5dc7-a8d9-4606e18376e1",
      "id": "CVE-2025-48913",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48913 is fixed in version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-integration-jca."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-integration-jca@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:797c0864-0d5c-5cfb-ba4f-b065c9284ba4",
      "id": "CVE-2026-44417",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44417 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-integration-jca."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-integration-jca@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a50e533e-5a68-5a5a-87fb-edc4dd87fbb4",
      "id": "CVE-2026-44618",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44618 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-integration-jca."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-integration-jca@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c04f19df-40c4-5805-86b9-f76a8ca4255e",
      "id": "CVE-2026-44930",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44930 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-integration-jca."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-integration-jca@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee8f1a5f-8ed8-5d68-94d8-6416f183aad6",
      "id": "CVE-2026-49875",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49875 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-integration-jca."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-integration-jca@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:016c6bbc-815b-56f2-b2a7-0c09cd039199",
      "id": "CVE-2026-50623",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50623 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-integration-jca."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-integration-jca@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:638cc90e-5d22-56d2-aa40-f82b553f086c",
      "id": "CVE-2026-50627",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50627 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-integration-jca."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-integration-jca@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15758ebe-c188-549c-84bf-d839c374f7fd",
      "id": "CVE-2026-50628",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50628 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-integration-jca."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-integration-jca@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3da3ebbb-bbad-5416-b913-39fcaa8946a7",
      "id": "CVE-2026-50629",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50629 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-integration-jca."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-integration-jca@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a521704-33e5-589a-9744-98f3ecf452e5",
      "id": "CVE-2026-50630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50630 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-integration-jca."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-integration-jca@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68825944-6af1-538a-a1d9-3d7b290da6ad",
      "id": "CVE-2026-50631",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50631 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-integration-jca."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-integration-jca@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8da719af-5d60-5503-818b-b07dc46da8c7",
      "id": "CVE-2026-50632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50632 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-integration-jca."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-integration-jca@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b33e0f9-bdf3-50a2-a589-e1fa9fab45f4",
      "id": "CVE-2026-50633",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50633 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-integration-jca."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-integration-jca@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6da3b64d-687c-59c7-a3f8-f7051cbf549f",
      "id": "CVE-2026-50634",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50634 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-integration-jca."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-integration-jca@3.4.5-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ddb3a2e1-e22a-5661-ad9e-7a56314eda4f",
      "id": "CVE-2026-50645",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-50645 affects version 3.4.5-tuxcare.1 of org.apache.cxf:cxf-integration-jca."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-integration-jca@3.4.5-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.cxf/cxf-integration-jca@3.4.5-tuxcare.1"
    }
  ]
}