{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:35970c7f-43d3-5df1-b190-9d4456a3a643",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.poi/poi-excelant@3.10-FINAL-tuxcare.3",
      "type": "library",
      "group": "org.apache.poi",
      "name": "poi-excelant",
      "version": "3.10-FINAL-tuxcare.3",
      "purl": "pkg:maven/org.apache.poi/poi-excelant@3.10-FINAL-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:0d208492-e4b7-529d-9138-3b39882116c4",
      "id": "CVE-2014-3529",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2014-3529 is fixed in version 3.10-FINAL-tuxcare.3 of org.apache.poi:poi-excelant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.poi/poi-excelant@3.10-FINAL-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5f11264-0c61-5ae9-85a6-13e51b939775",
      "id": "CVE-2014-3574",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2014-3574 is fixed in version 3.10-FINAL-tuxcare.3 of org.apache.poi:poi-excelant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.poi/poi-excelant@3.10-FINAL-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16b2094b-c6e0-51a2-8581-c217086e9735",
      "id": "CVE-2014-9527",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2014-9527 is fixed in version 3.10-FINAL-tuxcare.3 of org.apache.poi:poi-excelant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.poi/poi-excelant@3.10-FINAL-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49f9c592-3c79-554e-89b8-a89acc9eafb3",
      "id": "CVE-2016-5000",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2016-5000 is fixed in version 3.10-FINAL-tuxcare.3 of org.apache.poi:poi-excelant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.poi/poi-excelant@3.10-FINAL-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05df1055-c805-52b6-a19b-a43adebd3500",
      "id": "CVE-2017-12626",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2017-12626 is fixed in version 3.10-FINAL-tuxcare.3 of org.apache.poi:poi-excelant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.poi/poi-excelant@3.10-FINAL-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b35b51a3-b63e-5707-8a8e-be9a752abfe5",
      "id": "CVE-2017-5644",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2017-5644 does not affect version 3.10-FINAL-tuxcare.3 of org.apache.poi:poi-excelant. Version not vulnerable (per prereq analysis); terminalized."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.poi/poi-excelant@3.10-FINAL-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38fad8da-a0fb-52f3-aae2-64d6b54a0389",
      "id": "CVE-2019-12415",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2019-12415 is fixed in version 3.10-FINAL-tuxcare.3 of org.apache.poi:poi-excelant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.poi/poi-excelant@3.10-FINAL-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60ee55e2-5fc2-538b-997d-b6ebf3d55317",
      "id": "CVE-2022-26336",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-26336 is fixed in version 3.10-FINAL-tuxcare.3 of org.apache.poi:poi-excelant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.poi/poi-excelant@3.10-FINAL-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6c4767b-9618-58d6-8efa-52cde28b459d",
      "id": "CVE-2025-31672",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31672 is fixed in version 3.10-FINAL-tuxcare.3 of org.apache.poi:poi-excelant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.poi/poi-excelant@3.10-FINAL-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.poi/poi-excelant@3.10-FINAL-tuxcare.3"
    }
  ]
}