{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6fd0a46b-c075-4484-bd17-da19caea510b",
  "version": 1,
  "metadata": {
    "timestamp": "2025-10-23T14:28:57+00:00",
    "tools": {
      "components": [
        {
          "type": "application",
          "manufacturer": {
            "name": "Aqua Security Software Ltd."
          },
          "group": "aquasecurity",
          "name": "trivy",
          "version": "0.67.2"
        }
      ]
    },
    "component": {
      "bom-ref": "159f3fbb-edd1-48a0-afbb-545ff46f71fb",
      "type": "application",
      "name": "confluent-server-rest",
      "properties": [
        {
          "name": "aquasecurity:trivy:SchemaVersion",
          "value": "2"
        }
      ],
      "version": "7.9.4-1",
      "supplier": {
        "name": "Confluent",
        "url": [
          "https://confluent.io"
        ]
      },
      "publisher": "Confluent"
    }
  },
  "components": [
    {
      "bom-ref": "01f23cca-484a-4612-bf9c-39a314fa5a5c",
      "type": "library",
      "group": "com.google.code.findbugs",
      "name": "jsr305",
      "version": "3.0.2",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f3762ed147518f023106951ad8c4237561ab37e5"
        }
      ],
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/kafka-clients-7.9.4-ce.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "2963cbe9-c007-4667-b7ca-70d2b0515cd2",
      "type": "library",
      "group": "com.google.guava",
      "name": "guava",
      "version": "32.0.1-jre",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f3762ed147518f023106951ad8c4237561ab37e5"
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@32.0.1-jre",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/kafka-clients-7.9.4-ce.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "5442d139-d560-4b07-875d-3beb4152f92f",
      "type": "library",
      "group": "com.google.j2objc",
      "name": "j2objc-annotations",
      "version": "2.8",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c85270e307e7b822f1086b93689124b89768e273"
        }
      ],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@2.8",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/j2objc-annotations-2.8.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "67fa8530-f531-4f6b-aea4-9c4e96107cb3",
      "type": "library",
      "group": "com.google.guava",
      "name": "failureaccess",
      "version": "1.0.1",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
        }
      ],
      "purl": "pkg:maven/com.google.guava/failureaccess@1.0.1",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/failureaccess-1.0.1.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "6f73d008-a58e-43cd-8cef-521741e49844",
      "type": "library",
      "group": "com.google.j2objc",
      "name": "j2objc-annotations",
      "version": "2.8",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f3762ed147518f023106951ad8c4237561ab37e5"
        }
      ],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@2.8",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/kafka-clients-7.9.4-ce.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "77edc944-247d-4387-b43a-dc61086b2469",
      "type": "library",
      "group": "com.google.guava",
      "name": "failureaccess",
      "version": "1.0.1",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f3762ed147518f023106951ad8c4237561ab37e5"
        }
      ],
      "purl": "pkg:maven/com.google.guava/failureaccess@1.0.1",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/kafka-clients-7.9.4-ce.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "91f7b2ae-2c9c-4a5a-b20d-de206e0b2542",
      "type": "library",
      "group": "com.google.code.findbugs",
      "name": "jsr305",
      "version": "3.0.2",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        }
      ],
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/jsr305-3.0.2.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "98f71924-8b82-4b5e-9be6-48ad61dd836c",
      "type": "library",
      "group": "com.google.guava",
      "name": "guava",
      "version": "32.0.1-jre",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6e5d51a72d142f2d40a57dfb897188b36a95b489"
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@32.0.1-jre",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/guava-32.0.1-jre.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "b97ab3a4-b029-40ca-a3ee-0df07cd69c69",
      "type": "library",
      "group": "com.google.guava",
      "name": "listenablefuture",
      "version": "9999.0-empty-to-avoid-conflict-with-guava",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b421526c5f297295adef1c886e5246c39d4ac629"
        }
      ],
      "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "e79474ef-cf82-43b6-9042-88cb757feaa2",
      "type": "library",
      "group": "com.google.guava",
      "name": "listenablefuture",
      "version": "9999.0-empty-to-avoid-conflict-with-guava",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f3762ed147518f023106951ad8c4237561ab37e5"
        }
      ],
      "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/kafka-clients-7.9.4-ce.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.github.luben/zstd-jni@1.5.6-4",
      "type": "library",
      "group": "com.github.luben",
      "name": "zstd-jni",
      "version": "1.5.6-4",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ba9e303e0b5e94cdd0017390d7d8c06f47fd61f7"
        }
      ],
      "purl": "pkg:maven/com.github.luben/zstd-jni@1.5.6-4",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/zstd-jni-1.5.6-4.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0",
      "type": "library",
      "group": "com.google.errorprone",
      "name": "error_prone_annotations",
      "version": "2.18.0",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "89b684257096f548fa39a7df9fdaa409d4d4df91"
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/error_prone_annotations-2.18.0.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.19.1",
      "type": "library",
      "group": "com.google.errorprone",
      "name": "error_prone_annotations",
      "version": "2.19.1",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f3762ed147518f023106951ad8c4237561ab37e5"
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.19.1",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/kafka-clients-7.9.4-ce.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.confluent/ce-kafka-rest-extensions@7.9.4",
      "type": "library",
      "group": "io.confluent",
      "name": "ce-kafka-rest-extensions",
      "version": "7.9.4",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c8439398ed2c09126a4852c650394e57ec1b749f"
        }
      ],
      "purl": "pkg:maven/io.confluent/ce-kafka-rest-extensions@7.9.4",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/ce-kafka-rest-extensions-7.9.4.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.confluent/ce-kafka-rest-servlet@7.9.4",
      "type": "library",
      "group": "io.confluent",
      "name": "ce-kafka-rest-servlet",
      "version": "7.9.4",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "63ddbcb229e46b3026ec953ae10979e5f8a3f907"
        }
      ],
      "purl": "pkg:maven/io.confluent/ce-kafka-rest-servlet@7.9.4",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-servlet/ce-kafka-rest-servlet-7.9.4.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.confluent/common-utils@7.9.4",
      "type": "library",
      "group": "io.confluent",
      "name": "common-utils",
      "version": "7.9.4",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a55dcc0e49f9b868704d71819ec028273d671711"
        }
      ],
      "purl": "pkg:maven/io.confluent/common-utils@7.9.4",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/common-utils-7.9.4.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/javax.ws.rs/javax.ws.rs-api@2.1.1",
      "type": "library",
      "group": "javax.ws.rs",
      "name": "javax.ws.rs-api",
      "version": "2.1.1",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d3466bc9321fe84f268a1adb3b90373fc14b0eb5"
        }
      ],
      "purl": "pkg:maven/javax.ws.rs/javax.ws.rs-api@2.1.1",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/javax.ws.rs-api-2.1.1.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.checkerframework/checker-qual@3.33.0",
      "type": "library",
      "group": "org.checkerframework",
      "name": "checker-qual",
      "version": "3.33.0",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "de2b60b62da487644fc11f734e73c8b0b431238f"
        }
      ],
      "purl": "pkg:maven/org.checkerframework/checker-qual@3.33.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/checker-qual-3.33.0.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.lz4/lz4-java@1.8.0",
      "type": "library",
      "group": "org.lz4",
      "name": "lz4-java",
      "version": "1.8.0",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b986a99445e49ea5fbf5d149c4b63f6ed6c6780"
        }
      ],
      "purl": "pkg:maven/org.lz4/lz4-java@1.8.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/lz4-java-1.8.0.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "type": "library",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "version": "1.7.36",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6c62681a2f655b49963a5983b8b0950a6120ae14"
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/slf4j-api-1.7.36.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5",
      "type": "library",
      "group": "org.xerial.snappy",
      "name": "snappy-java",
      "version": "1.1.10.5",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ac605269f3598506196e469f1fb0d7ed5c55059e"
        }
      ],
      "purl": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/snappy-java-1.1.10.5.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "01f23cca-484a-4612-bf9c-39a314fa5a5c",
      "dependsOn": []
    },
    {
      "ref": "159f3fbb-edd1-48a0-afbb-545ff46f71fb",
      "dependsOn": [
        "01f23cca-484a-4612-bf9c-39a314fa5a5c",
        "2963cbe9-c007-4667-b7ca-70d2b0515cd2",
        "5442d139-d560-4b07-875d-3beb4152f92f",
        "67fa8530-f531-4f6b-aea4-9c4e96107cb3",
        "6f73d008-a58e-43cd-8cef-521741e49844",
        "77edc944-247d-4387-b43a-dc61086b2469",
        "91f7b2ae-2c9c-4a5a-b20d-de206e0b2542",
        "98f71924-8b82-4b5e-9be6-48ad61dd836c",
        "b97ab3a4-b029-40ca-a3ee-0df07cd69c69",
        "e79474ef-cf82-43b6-9042-88cb757feaa2",
        "pkg:maven/com.github.luben/zstd-jni@1.5.6-4",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.19.1",
        "pkg:maven/io.confluent/ce-kafka-rest-extensions@7.9.4",
        "pkg:maven/io.confluent/ce-kafka-rest-servlet@7.9.4",
        "pkg:maven/io.confluent/common-utils@7.9.4",
        "pkg:maven/javax.ws.rs/javax.ws.rs-api@2.1.1",
        "pkg:maven/org.checkerframework/checker-qual@3.33.0",
        "pkg:maven/org.lz4/lz4-java@1.8.0",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5"
      ]
    },
    {
      "ref": "2963cbe9-c007-4667-b7ca-70d2b0515cd2",
      "dependsOn": []
    },
    {
      "ref": "5442d139-d560-4b07-875d-3beb4152f92f",
      "dependsOn": []
    },
    {
      "ref": "67fa8530-f531-4f6b-aea4-9c4e96107cb3",
      "dependsOn": []
    },
    {
      "ref": "6f73d008-a58e-43cd-8cef-521741e49844",
      "dependsOn": []
    },
    {
      "ref": "77edc944-247d-4387-b43a-dc61086b2469",
      "dependsOn": []
    },
    {
      "ref": "91f7b2ae-2c9c-4a5a-b20d-de206e0b2542",
      "dependsOn": []
    },
    {
      "ref": "98f71924-8b82-4b5e-9be6-48ad61dd836c",
      "dependsOn": []
    },
    {
      "ref": "b97ab3a4-b029-40ca-a3ee-0df07cd69c69",
      "dependsOn": []
    },
    {
      "ref": "e79474ef-cf82-43b6-9042-88cb757feaa2",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.luben/zstd-jni@1.5.6-4",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.19.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.confluent/ce-kafka-rest-extensions@7.9.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.confluent/ce-kafka-rest-servlet@7.9.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.confluent/common-utils@7.9.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/javax.ws.rs/javax.ws.rs-api@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.checkerframework/checker-qual@3.33.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.lz4/lz4-java@1.8.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5",
      "dependsOn": []
    }
  ],
  "vulnerabilities": []
}