{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:48c53758-2a67-5064-9fba-910b726390ff",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "async-http-client",
      "purl": "pkg:maven/org.asynchttpclient/async-http-client@2.3.0-tuxcare.1",
      "type": "library",
      "group": "org.asynchttpclient",
      "bom-ref": "pkg:maven/org.asynchttpclient/async-http-client@2.3.0-tuxcare.1",
      "version": "2.3.0-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "async-http-client",
            "purl": "pkg:maven/org.asynchttpclient/async-http-client@2.3.0",
            "type": "library",
            "group": "org.asynchttpclient",
            "version": "2.3.0"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2017-14063",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client@2.3.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4bae98bf-ef0e-54bd-8c76-f70dbb0d7332",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-14063 affects version 2.3.0-tuxcare.1 of org.asynchttpclient:async-http-client."
      }
    },
    {
      "id": "CVE-2024-53990",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client@2.3.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5a118309-0db1-579c-801c-5dcc2768f821",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-53990 is fixed in version 2.3.0-tuxcare.1 of org.asynchttpclient:async-http-client."
      }
    },
    {
      "id": "CVE-2026-107226",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client@2.3.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:81b8e2f1-57c7-5284-a747-990415a53350",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-107226 affects version 2.3.0-tuxcare.1 of org.asynchttpclient:async-http-client."
      }
    },
    {
      "id": "CVE-2026-107227",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client@2.3.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b68d75d2-4936-5f4c-8e18-51e3c8d004a9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-107227 affects version 2.3.0-tuxcare.1 of org.asynchttpclient:async-http-client."
      }
    },
    {
      "id": "CVE-2026-107228",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client@2.3.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a613a97c-719c-507d-abc7-dc4ddd5141f9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-107228 affects version 2.3.0-tuxcare.1 of org.asynchttpclient:async-http-client."
      }
    },
    {
      "id": "CVE-2026-107230",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client@2.3.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d6e1ad59-72ce-5234-bd3b-376d112ffbfb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-107230 is fixed in version 2.3.0-tuxcare.1 of org.asynchttpclient:async-http-client."
      }
    },
    {
      "id": "CVE-2026-107231",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client@2.3.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:afe9e526-3280-5c92-a9d9-767c9118d2ee",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-107231 is fixed in version 2.3.0-tuxcare.1 of org.asynchttpclient:async-http-client."
      }
    },
    {
      "id": "CVE-2026-107280",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client@2.3.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0ee19c8b-71c9-5448-a679-10cf47a4db01",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-107280 is fixed in version 2.3.0-tuxcare.1 of org.asynchttpclient:async-http-client."
      }
    },
    {
      "id": "CVE-2026-107282",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client@2.3.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aee667cb-c422-5c00-9924-acabe23830d7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-107282 is fixed in version 2.3.0-tuxcare.1 of org.asynchttpclient:async-http-client."
      }
    },
    {
      "id": "CVE-2026-107283",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client@2.3.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7f65cd26-7594-5db5-9d72-9cf202779465",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-107283 is fixed in version 2.3.0-tuxcare.1 of org.asynchttpclient:async-http-client."
      }
    },
    {
      "id": "CVE-2026-107285",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client@2.3.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f0241bfa-ef85-528e-ae5b-f8e6dee0bd5f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-107285 is fixed in version 2.3.0-tuxcare.1 of org.asynchttpclient:async-http-client."
      }
    },
    {
      "id": "CVE-2026-40490",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client@2.3.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:09fc494c-f928-5597-a384-62e8617e04c6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40490 affects version 2.3.0-tuxcare.1 of org.asynchttpclient:async-http-client."
      }
    },
    {
      "id": "CVE-2026-45300",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client@2.3.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:18bf3132-befc-5fe0-a663-883f9a544643",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45300 affects version 2.3.0-tuxcare.1 of org.asynchttpclient:async-http-client."
      }
    },
    {
      "id": "CVE-2026-55688",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client@2.3.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aab5a7c3-6355-596e-9d0b-8b61e54056cd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55688 affects version 2.3.0-tuxcare.1 of org.asynchttpclient:async-http-client."
      }
    },
    {
      "id": "CVE-2026-85716",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client@2.3.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1aee9458-e826-5708-8679-e9dce624275b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-85716 affects version 2.3.0-tuxcare.1 of org.asynchttpclient:async-http-client."
      }
    },
    {
      "id": "CVE-2026-85717",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client@2.3.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:613377c3-edd1-5366-b6c1-6d815023b9e7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-85717 affects version 2.3.0-tuxcare.1 of org.asynchttpclient:async-http-client."
      }
    },
    {
      "id": "CVE-2026-85720",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client@2.3.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cb78951f-f520-5070-8e3c-0b002c714110",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-85720 is fixed in version 2.3.0-tuxcare.1 of org.asynchttpclient:async-http-client."
      }
    },
    {
      "id": "CVE-2026-85721",
      "affects": [
        {
          "ref": "pkg:maven/org.asynchttpclient/async-http-client@2.3.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a902128d-6c34-5129-a727-b785dd827192",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-85721 is fixed in version 2.3.0-tuxcare.1 of org.asynchttpclient:async-http-client."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.asynchttpclient/async-http-client@2.3.0-tuxcare.1"
    }
  ]
}