{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4594e75f-aa81-51de-8b80-5e96fbf3461e",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.gradle/gradle-signing@7.6.6-tuxcare.2",
      "type": "library",
      "group": "org.gradle",
      "name": "gradle-signing",
      "version": "7.6.6-tuxcare.2",
      "purl": "pkg:maven/org.gradle/gradle-signing@7.6.6-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:76830ca0-712a-5b82-b0ad-fefb7cae8a27",
      "id": "CVE-2019-11402",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2019-11402 is a false positive for org.gradle:gradle-signing 7.6.6-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.gradle/gradle-signing@7.6.6-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e4ce0d7-1c0b-56ef-947a-8c105c1b3e6a",
      "id": "CVE-2019-11403",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2019-11403 is a false positive for org.gradle:gradle-signing 7.6.6-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.gradle/gradle-signing@7.6.6-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:116eb090-3d4e-5682-b7a0-da0353718b66",
      "id": "CVE-2020-15767",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-15767 is a false positive for org.gradle:gradle-signing 7.6.6-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.gradle/gradle-signing@7.6.6-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9729a23b-72ef-5643-9af3-7c85f9605d49",
      "id": "CVE-2020-15773",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-15773 is a false positive for org.gradle:gradle-signing 7.6.6-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.gradle/gradle-signing@7.6.6-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0977cd66-3ee1-5698-bc29-fcd668de6a93",
      "id": "CVE-2020-22475",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-22475 is a false positive for org.gradle:gradle-signing 7.6.6-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.gradle/gradle-signing@7.6.6-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f085415-964b-55d0-9975-1e4e8bc8fe8f",
      "id": "CVE-2021-41589",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2021-41589 is a false positive for org.gradle:gradle-signing 7.6.6-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.gradle/gradle-signing@7.6.6-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:abf85143-9384-5fb3-9833-76bfc50e7f0f",
      "id": "CVE-2022-25364",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2022-25364 is a false positive for org.gradle:gradle-signing 7.6.6-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.gradle/gradle-signing@7.6.6-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84195729-beb0-5f05-9c59-eb6ea6f0d498",
      "id": "CVE-2022-39349",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2022-39349 is a false positive for org.gradle:gradle-signing 7.6.6-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.gradle/gradle-signing@7.6.6-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8a279b1-311c-51ca-8cc8-1289a51ad9fa",
      "id": "CVE-2023-49238",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2023-49238 is a false positive for org.gradle:gradle-signing 7.6.6-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.gradle/gradle-signing@7.6.6-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.gradle/gradle-signing@7.6.6-tuxcare.2"
    }
  ]
}