{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:fb0bd9f5-119b-53e2-80b5-ff79ebf6ea5f",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "amqp-client",
      "purl": "pkg:maven/com.rabbitmq/amqp-client@5.5.0-tuxcare.2",
      "type": "library",
      "group": "com.rabbitmq",
      "bom-ref": "pkg:maven/com.rabbitmq/amqp-client@5.5.0-tuxcare.2",
      "version": "5.5.0-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "amqp-client",
            "purl": "pkg:maven/com.rabbitmq/amqp-client@5.5.0",
            "type": "library",
            "group": "com.rabbitmq",
            "version": "5.5.0"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2018-11087",
      "affects": [
        {
          "ref": "pkg:maven/com.rabbitmq/amqp-client@5.5.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bb81a904-d710-5d2f-a042-a1eef5d24bc5",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-11087 does not affect version 5.5.0-tuxcare.2 of com.rabbitmq:amqp-client. not_affected \u2014 CVE-2018-11087 describes a man-in-the-middle vulnerability in Spring AMQP due to lack of hostname verification in the underlying RabbitMQ Java Client. The target repository (RabbitMQ Java Client 5.5.0-tuxcare.1) is not affected because the hostname verification capability was already present in the upstream 5.5.0 release. The fix adds SSLParameters.setEndpointIdentificationAlgorithm(\"HTTPS\") to...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2023-46120",
      "affects": [
        {
          "ref": "pkg:maven/com.rabbitmq/amqp-client@5.5.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:78d0efbb-5567-5448-893c-d7940ce0f738",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46120 affects version 5.5.0-tuxcare.2 of com.rabbitmq:amqp-client."
      }
    },
    {
      "id": "CVE-2026-106121",
      "affects": [
        {
          "ref": "pkg:maven/com.rabbitmq/amqp-client@5.5.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:77842162-e49f-578d-ab38-6e81d7e8c422",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-106121 affects version 5.5.0-tuxcare.2 of com.rabbitmq:amqp-client."
      }
    },
    {
      "id": "CVE-2026-106122",
      "affects": [
        {
          "ref": "pkg:maven/com.rabbitmq/amqp-client@5.5.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3bc54200-724a-5802-a754-888bd7706bb4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-106122 affects version 5.5.0-tuxcare.2 of com.rabbitmq:amqp-client."
      }
    },
    {
      "id": "CVE-2026-106123",
      "affects": [
        {
          "ref": "pkg:maven/com.rabbitmq/amqp-client@5.5.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:43dc5c4c-39ad-593a-94f7-cb829396709e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-106123 affects version 5.5.0-tuxcare.2 of com.rabbitmq:amqp-client."
      }
    },
    {
      "id": "CVE-2026-61634",
      "affects": [
        {
          "ref": "pkg:maven/com.rabbitmq/amqp-client@5.5.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d6d0c45f-193e-537c-b40d-b35d6b750fba",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-61634 affects version 5.5.0-tuxcare.2 of com.rabbitmq:amqp-client."
      }
    },
    {
      "id": "CVE-2026-63335",
      "affects": [
        {
          "ref": "pkg:maven/com.rabbitmq/amqp-client@5.5.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:673b9996-22c8-5dbc-82b9-25e87e9d5ddd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-63335 affects version 5.5.0-tuxcare.2 of com.rabbitmq:amqp-client."
      }
    },
    {
      "id": "CVE-2026-63336",
      "affects": [
        {
          "ref": "pkg:maven/com.rabbitmq/amqp-client@5.5.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0f7598f7-1fd1-5d90-b683-2ed0a7b6134a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-63336 is fixed in version 5.5.0-tuxcare.2 of com.rabbitmq:amqp-client."
      }
    },
    {
      "id": "CVE-2026-63337",
      "affects": [
        {
          "ref": "pkg:maven/com.rabbitmq/amqp-client@5.5.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f261c048-55eb-59a8-87de-5364aeade173",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-63337 is fixed in version 5.5.0-tuxcare.2 of com.rabbitmq:amqp-client."
      }
    },
    {
      "id": "CVE-2026-69219",
      "affects": [
        {
          "ref": "pkg:maven/com.rabbitmq/amqp-client@5.5.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7c6d8e26-ece7-5384-9c7f-f9ebbe5614a9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-69219 affects version 5.5.0-tuxcare.2 of com.rabbitmq:amqp-client."
      }
    },
    {
      "id": "CVE-2026-69220",
      "affects": [
        {
          "ref": "pkg:maven/com.rabbitmq/amqp-client@5.5.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:acc4ff6a-433f-5318-8f4e-86987a2c3821",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-69220 is fixed in version 5.5.0-tuxcare.2 of com.rabbitmq:amqp-client."
      }
    },
    {
      "id": "CVE-2026-75516",
      "affects": [
        {
          "ref": "pkg:maven/com.rabbitmq/amqp-client@5.5.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:02a3f6c1-1541-585e-b343-9d712d33b10c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-75516 affects version 5.5.0-tuxcare.2 of com.rabbitmq:amqp-client."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/com.rabbitmq/amqp-client@5.5.0-tuxcare.2"
    }
  ]
}