{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:bcf8f7d0-cb7f-407c-aa96-b4b1871532c6",
  "version": 1,
  "metadata": {
    "timestamp": "2026-01-21T20:45:18+00:00",
    "tools": {
      "components": [
        {
          "type": "application",
          "manufacturer": {
            "name": "Aqua Security Software Ltd."
          },
          "group": "aquasecurity",
          "name": "trivy",
          "version": "0.68.2"
        }
      ]
    },
    "component": {
      "bom-ref": "ebf79240-860e-494b-8467-c0e6949e6147",
      "type": "application",
      "name": "confluent-server-rest",
      "properties": [
        {
          "name": "aquasecurity:trivy:SchemaVersion",
          "value": "2"
        }
      ],
      "version": "8.0.3-1",
      "supplier": {
        "name": "Confluent",
        "url": [
          "https://confluent.io"
        ]
      },
      "publisher": "Confluent"
    }
  },
  "components": [
    {
      "bom-ref": "0cd1b5e4-e9be-4c26-a973-f4fe8a1bfae5",
      "type": "library",
      "group": "com.google.guava",
      "name": "listenablefuture",
      "version": "9999.0-empty-to-avoid-conflict-with-guava",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d4d3eb8682391919d61289ed0966efe9f848655c"
        }
      ],
      "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/kafka-clients-8.0.3-ce.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "269b8f46-03ac-4286-a883-eacc18cfb405",
      "type": "library",
      "group": "com.google.code.findbugs",
      "name": "jsr305",
      "version": "3.0.2",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        }
      ],
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/jsr305-3.0.2.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "3559d16d-af27-46fe-a2f1-26d9c6eff152",
      "type": "library",
      "group": "com.google.code.findbugs",
      "name": "jsr305",
      "version": "3.0.2",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d4d3eb8682391919d61289ed0966efe9f848655c"
        }
      ],
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/kafka-clients-8.0.3-ce.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "5dbe2475-8270-4688-a489-e11863a8f34c",
      "type": "library",
      "group": "com.google.guava",
      "name": "failureaccess",
      "version": "1.0.1",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
        }
      ],
      "purl": "pkg:maven/com.google.guava/failureaccess@1.0.1",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/failureaccess-1.0.1.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "7ff92e1c-e3a7-4a9a-adf2-96b54c13ed7d",
      "type": "library",
      "group": "com.google.guava",
      "name": "guava",
      "version": "32.0.1-jre",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d4d3eb8682391919d61289ed0966efe9f848655c"
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@32.0.1-jre",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/kafka-clients-8.0.3-ce.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "866ab5d6-1971-4226-8322-697108fec61d",
      "type": "library",
      "group": "com.google.j2objc",
      "name": "j2objc-annotations",
      "version": "2.8",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d4d3eb8682391919d61289ed0966efe9f848655c"
        }
      ],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@2.8",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/kafka-clients-8.0.3-ce.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "94ca3626-3302-462f-b413-cc71eb4b38df",
      "type": "library",
      "group": "com.google.guava",
      "name": "listenablefuture",
      "version": "9999.0-empty-to-avoid-conflict-with-guava",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b421526c5f297295adef1c886e5246c39d4ac629"
        }
      ],
      "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "9c25cd20-ea0f-4634-bc16-0a9d72bff67b",
      "type": "library",
      "group": "com.google.guava",
      "name": "failureaccess",
      "version": "1.0.1",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d4d3eb8682391919d61289ed0966efe9f848655c"
        }
      ],
      "purl": "pkg:maven/com.google.guava/failureaccess@1.0.1",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/kafka-clients-8.0.3-ce.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "9ce8e406-d5f9-4955-b999-fbdf948585ac",
      "type": "library",
      "group": "com.google.guava",
      "name": "guava",
      "version": "32.0.1-jre",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6e5d51a72d142f2d40a57dfb897188b36a95b489"
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@32.0.1-jre",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/guava-32.0.1-jre.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "9fc0e1e0-cee3-4746-a3ed-cd0a7b0a6a18",
      "type": "library",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "version": "1.7.36",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6c62681a2f655b49963a5983b8b0950a6120ae14"
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-servlet/slf4j-api-1.7.36.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "c117340e-3f7a-46d5-ae60-af7062c0d325",
      "type": "library",
      "group": "com.google.j2objc",
      "name": "j2objc-annotations",
      "version": "2.8",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c85270e307e7b822f1086b93689124b89768e273"
        }
      ],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@2.8",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/j2objc-annotations-2.8.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "f411c99f-ecd8-496f-bb1f-901bbccb8caf",
      "type": "library",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "version": "1.7.36",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6c62681a2f655b49963a5983b8b0950a6120ae14"
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/slf4j-api-1.7.36.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.github.luben/zstd-jni@1.5.6-6",
      "type": "library",
      "group": "com.github.luben",
      "name": "zstd-jni",
      "version": "1.5.6-6",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2fbdb6597ff51efa4a5bf12df18f27b5aa4f2625"
        }
      ],
      "purl": "pkg:maven/com.github.luben/zstd-jni@1.5.6-6",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/zstd-jni-1.5.6-6.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0",
      "type": "library",
      "group": "com.google.errorprone",
      "name": "error_prone_annotations",
      "version": "2.18.0",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "89b684257096f548fa39a7df9fdaa409d4d4df91"
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/error_prone_annotations-2.18.0.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.42.0",
      "type": "library",
      "group": "com.google.errorprone",
      "name": "error_prone_annotations",
      "version": "2.42.0",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d4d3eb8682391919d61289ed0966efe9f848655c"
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.42.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/kafka-clients-8.0.3-ce.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.confluent/ce-kafka-rest-extensions@8.0.3",
      "type": "library",
      "group": "io.confluent",
      "name": "ce-kafka-rest-extensions",
      "version": "8.0.3",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c3f3560323d0fd9e79dd19956e7826a6a587884b"
        }
      ],
      "purl": "pkg:maven/io.confluent/ce-kafka-rest-extensions@8.0.3",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/ce-kafka-rest-extensions-8.0.3.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.confluent/ce-kafka-rest-servlet@8.0.3",
      "type": "library",
      "group": "io.confluent",
      "name": "ce-kafka-rest-servlet",
      "version": "8.0.3",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0b57269bad9b601374e8fd97536d35ba21f410bc"
        }
      ],
      "purl": "pkg:maven/io.confluent/ce-kafka-rest-servlet@8.0.3",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-servlet/ce-kafka-rest-servlet-8.0.3.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.confluent/common-utils@8.0.3",
      "type": "library",
      "group": "io.confluent",
      "name": "common-utils",
      "version": "8.0.3",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b4aedb4d9decafd81e6a2e8ce459e71fc604ffaf"
        }
      ],
      "purl": "pkg:maven/io.confluent/common-utils@8.0.3",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/common-utils-8.0.3.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0",
      "type": "library",
      "group": "jakarta.ws.rs",
      "name": "jakarta.ws.rs-api",
      "version": "3.1.0",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "15ce10d249a38865b58fc39521f10f29ab0e3363"
        }
      ],
      "purl": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/jakarta.ws.rs-api-3.1.0.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.checkerframework/checker-qual@3.33.0",
      "type": "library",
      "group": "org.checkerframework",
      "name": "checker-qual",
      "version": "3.33.0",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "de2b60b62da487644fc11f734e73c8b0b431238f"
        }
      ],
      "purl": "pkg:maven/org.checkerframework/checker-qual@3.33.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/checker-qual-3.33.0.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.lz4/lz4-java@1.8.0",
      "type": "library",
      "group": "org.lz4",
      "name": "lz4-java",
      "version": "1.8.0",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b986a99445e49ea5fbf5d149c4b63f6ed6c6780"
        }
      ],
      "purl": "pkg:maven/org.lz4/lz4-java@1.8.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/lz4-java-1.8.0.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5",
      "type": "library",
      "group": "org.xerial.snappy",
      "name": "snappy-java",
      "version": "1.1.10.5",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ac605269f3598506196e469f1fb0d7ed5c55059e"
        }
      ],
      "purl": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/snappy-java-1.1.10.5.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "0cd1b5e4-e9be-4c26-a973-f4fe8a1bfae5",
      "dependsOn": []
    },
    {
      "ref": "269b8f46-03ac-4286-a883-eacc18cfb405",
      "dependsOn": []
    },
    {
      "ref": "3559d16d-af27-46fe-a2f1-26d9c6eff152",
      "dependsOn": []
    },
    {
      "ref": "5dbe2475-8270-4688-a489-e11863a8f34c",
      "dependsOn": []
    },
    {
      "ref": "7ff92e1c-e3a7-4a9a-adf2-96b54c13ed7d",
      "dependsOn": []
    },
    {
      "ref": "866ab5d6-1971-4226-8322-697108fec61d",
      "dependsOn": []
    },
    {
      "ref": "94ca3626-3302-462f-b413-cc71eb4b38df",
      "dependsOn": []
    },
    {
      "ref": "9c25cd20-ea0f-4634-bc16-0a9d72bff67b",
      "dependsOn": []
    },
    {
      "ref": "9ce8e406-d5f9-4955-b999-fbdf948585ac",
      "dependsOn": []
    },
    {
      "ref": "9fc0e1e0-cee3-4746-a3ed-cd0a7b0a6a18",
      "dependsOn": []
    },
    {
      "ref": "c117340e-3f7a-46d5-ae60-af7062c0d325",
      "dependsOn": []
    },
    {
      "ref": "ebf79240-860e-494b-8467-c0e6949e6147",
      "dependsOn": [
        "0cd1b5e4-e9be-4c26-a973-f4fe8a1bfae5",
        "269b8f46-03ac-4286-a883-eacc18cfb405",
        "3559d16d-af27-46fe-a2f1-26d9c6eff152",
        "5dbe2475-8270-4688-a489-e11863a8f34c",
        "7ff92e1c-e3a7-4a9a-adf2-96b54c13ed7d",
        "866ab5d6-1971-4226-8322-697108fec61d",
        "94ca3626-3302-462f-b413-cc71eb4b38df",
        "9c25cd20-ea0f-4634-bc16-0a9d72bff67b",
        "9ce8e406-d5f9-4955-b999-fbdf948585ac",
        "9fc0e1e0-cee3-4746-a3ed-cd0a7b0a6a18",
        "c117340e-3f7a-46d5-ae60-af7062c0d325",
        "f411c99f-ecd8-496f-bb1f-901bbccb8caf",
        "pkg:maven/com.github.luben/zstd-jni@1.5.6-6",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.42.0",
        "pkg:maven/io.confluent/ce-kafka-rest-extensions@8.0.3",
        "pkg:maven/io.confluent/ce-kafka-rest-servlet@8.0.3",
        "pkg:maven/io.confluent/common-utils@8.0.3",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0",
        "pkg:maven/org.checkerframework/checker-qual@3.33.0",
        "pkg:maven/org.lz4/lz4-java@1.8.0",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5"
      ]
    },
    {
      "ref": "f411c99f-ecd8-496f-bb1f-901bbccb8caf",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.luben/zstd-jni@1.5.6-6",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.42.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.confluent/ce-kafka-rest-extensions@8.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.confluent/ce-kafka-rest-servlet@8.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.confluent/common-utils@8.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.checkerframework/checker-qual@3.33.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.lz4/lz4-java@1.8.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5",
      "dependsOn": []
    }
  ],
  "vulnerabilities": []
}