{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:febf8ddd-fe3e-5784-bbc9-deb99b1c0f3d",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "xstream",
      "purl": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3",
      "type": "library",
      "group": "com.thoughtworks.xstream",
      "bom-ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3",
      "version": "1.2.2-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "xstream",
            "purl": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2",
            "type": "library",
            "group": "com.thoughtworks.xstream",
            "version": "1.2.2"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2013-7285",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f3b77387-fe85-538d-85e7-95cc31d3c487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2013-7285 is fixed in version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2016-3674",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4ab4e735-e5cc-5b4e-a1e6-cc6adddc44c2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3674 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2017-7957",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:728c4e8a-482f-58b3-b9e1-261420cc2f17",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7957 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2019-10173",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:de1d42f9-d573-59bf-861c-a9b6a9c93f47",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-10173 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2020-26217",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2930d8c3-6b69-5292-a2f1-a6f33daaafd7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2020-26217 is fixed in version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2020-26258",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:78037785-e01e-53a4-acbc-14a62bb3a02f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-26258 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2020-26259",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b15017e5-67ec-5ea8-bb3c-93704e418fb3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-26259 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21341",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:321ef436-0651-5ca4-b062-e0c57013a3f4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21341 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21342",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f61a61c9-4302-5dd1-873c-3dae20ff70f3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21342 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21343",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d6334afe-3c30-57d9-99d2-5a7830718284",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21343 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21344",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:74ffb8fe-671d-556b-ad4b-991a3f721354",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21344 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21345",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:56dc22bc-22e3-50f1-8520-e64e209e620f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21345 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21346",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4282b9e8-54de-591a-ac2c-be768b950c09",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21346 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21347",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:88f6887b-ca2c-5078-afaa-945c3521312a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21347 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21348",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2a4fe883-8ff9-5247-a2a3-5a3decd92a9c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21348 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21349",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4b6687a8-8ee5-53b3-925a-ab3e851f1086",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21349 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21350",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a882f9ba-270f-53c5-abb6-c1e485c4204b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21350 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-21351",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f303256d-f816-5354-ba9c-2657f23d5a8d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-21351 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-29505",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:944ed4d4-cbec-5d0c-9571-ea527e8ce1b1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-29505 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39139",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9f3f86a4-4788-5c88-8403-3b98192807d6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39139 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39140",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d9e10441-fcb0-53cc-88eb-57cc29e44449",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39140 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39141",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ac878127-4593-53f2-9c5a-60764e4fbb89",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39141 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39144",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:32a974f6-7304-5db3-8efb-95c33ca8872a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39144 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39145",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a20c3145-5bb2-599d-b819-37d4ca89d457",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-39145 is fixed in version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39146",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3d048f5b-0654-535a-ad20-6682be2b5214",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39146 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39147",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8932da3e-80bd-55d1-8c2c-bae805626884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39147 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39148",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2933af4a-41b5-5d1e-8c57-aea9a9828e65",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39148 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39149",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4e04c648-14f1-5e55-923c-ef264c79fa01",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39149 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39150",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d5cbf64e-b5e1-52d7-b046-a73b8629ed39",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39150 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39151",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3cff28e5-7add-5d02-93cd-505537892ac0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39151 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39152",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5a68a70f-50f4-515c-8e7e-2d1b68c60d12",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39152 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39153",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a0656486-d102-5cff-bae0-b232d351c4d8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39153 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-39154",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f70236c8-7d47-5bcd-bef2-fa47bc953f92",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-39154 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2021-43859",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e1fbe9d6-7d1e-5dcd-a541-b3765964aa34",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-43859 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2022-40151",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5d1349b9-dccd-505f-86e0-285590ece1a0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-40151 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2022-41966",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a0dad1a2-4082-52ac-b9e6-21125724ad4c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41966 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "CVE-2024-47072",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:30b2a0ed-9d33-5879-96c2-44b017fea772",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-47072 affects version 1.2.2-tuxcare.3 of com.thoughtworks.xstream:xstream."
      }
    },
    {
      "id": "GHSA-3mq5-fq9h-gj7j",
      "affects": [
        {
          "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:03ce062e-a494-5ea6-b354-74f11da1b827",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-3mq5-fq9h-gj7j is a false positive for com.thoughtworks.xstream:xstream 1.2.2-tuxcare.3."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/com.thoughtworks.xstream/xstream@1.2.2-tuxcare.3"
    }
  ]
}