{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:0c96bf44-7e0e-5609-b679-dfd8ba3b4304",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "json-path",
      "purl": "pkg:maven/com.jayway.jsonpath/json-path@2.9.0-tuxcare.2",
      "type": "library",
      "group": "com.jayway.jsonpath",
      "bom-ref": "pkg:maven/com.jayway.jsonpath/json-path@2.9.0-tuxcare.2",
      "version": "2.9.0-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "json-path",
            "purl": "pkg:maven/com.jayway.jsonpath/json-path@2.9.0",
            "type": "library",
            "group": "com.jayway.jsonpath",
            "version": "2.9.0"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2023-51074",
      "affects": [
        {
          "ref": "pkg:maven/com.jayway.jsonpath/json-path@2.9.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:139d7d0e-8671-5e55-92ab-b8d75a03098b",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2023-51074 does not affect version 2.9.0-tuxcare.2 of com.jayway.jsonpath:json-path. not_affected \u2014 CVE-2023-51074 (stack overflow via Criteria.parse()) is not present in the target repository at version 2.9.0. The fix (commit 71a09c1) was already included in the upstream 2.9.0 release before TuxCare onboarded it. The fix adds validation to check if indexOfNextSignificantChar returns -1 (indicating no closing bracket exists) and fails early with an error message instead of causing infinite re...",
        "justification": "code_not_present"
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/com.jayway.jsonpath/json-path@2.9.0-tuxcare.2"
    }
  ]
}