{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f8b5301b-8f36-5283-9b89-db8482d64922",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "neethi",
      "purl": "pkg:maven/org.apache.neethi/neethi@3.1.1-tuxcare.3",
      "type": "library",
      "group": "org.apache.neethi",
      "bom-ref": "pkg:maven/org.apache.neethi/neethi@3.1.1-tuxcare.3",
      "version": "3.1.1-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "neethi",
            "purl": "pkg:maven/org.apache.neethi/neethi@3.1.1",
            "type": "library",
            "group": "org.apache.neethi",
            "version": "3.1.1"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-42402",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.neethi/neethi@3.1.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:cfc2bb06-fddf-549d-8c3a-d77f27d4b6c5",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-42402 does not affect version 3.1.1-tuxcare.3 of org.apache.neethi:neethi. Patches already applied: 9069bcf9d401fbcfff834f26248845f8d51da4b5 (already in target via a74d961 'Backport CVE-2026-42404 to 3.1.1')",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-42403",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.neethi/neethi@3.1.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d82ea594-f17d-52f3-8938-82fb3dda8b0c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42403 is fixed in version 3.1.1-tuxcare.3 of org.apache.neethi:neethi."
      }
    },
    {
      "id": "CVE-2026-42404",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.neethi/neethi@3.1.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c31527a3-393a-5205-8f51-8487e0cb9c29",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42404 is fixed in version 3.1.1-tuxcare.3 of org.apache.neethi:neethi."
      }
    },
    {
      "id": "CVE-2026-66142",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.neethi/neethi@3.1.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:bd517405-c3cc-5811-b321-19f78ff77d73",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66142 affects version 3.1.1-tuxcare.3 of org.apache.neethi:neethi."
      }
    },
    {
      "id": "CVE-2026-66143",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.neethi/neethi@3.1.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a4ceba52-6540-503d-89f3-5c69f23fa0d8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66143 affects version 3.1.1-tuxcare.3 of org.apache.neethi:neethi."
      }
    },
    {
      "id": "CVE-2026-66144",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.neethi/neethi@3.1.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2ca47d5e-1465-50ab-90af-dbe601b7616c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-66144 affects version 3.1.1-tuxcare.3 of org.apache.neethi:neethi."
      }
    },
    {
      "id": "CVE-2026-91863",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.neethi/neethi@3.1.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:33e7b89e-c823-563a-ac61-8a0ff24af9f3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-91863 affects version 3.1.1-tuxcare.3 of org.apache.neethi:neethi."
      }
    },
    {
      "id": "CVE-2026-91864",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.neethi/neethi@3.1.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f1573118-273f-5884-b5b8-d0d0b675fcca",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-91864 affects version 3.1.1-tuxcare.3 of org.apache.neethi:neethi."
      }
    },
    {
      "id": "CVE-2026-91865",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.neethi/neethi@3.1.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a402fed1-8f46-5f77-9d3f-232dc207a82d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-91865 affects version 3.1.1-tuxcare.3 of org.apache.neethi:neethi."
      }
    },
    {
      "id": "CVE-2026-91866",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.neethi/neethi@3.1.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0a772261-3c8d-5303-ab19-1d22a311af34",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-91866 affects version 3.1.1-tuxcare.3 of org.apache.neethi:neethi."
      }
    },
    {
      "id": "CVE-2026-91867",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.neethi/neethi@3.1.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1662d1bc-00dd-5968-930b-b988dc63a004",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-91867 affects version 3.1.1-tuxcare.3 of org.apache.neethi:neethi."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.neethi/neethi@3.1.1-tuxcare.3"
    }
  ]
}