{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:13626064-d9db-4937-b063-69f0b42cbb6b",
  "version": 1,
  "metadata": {
    "timestamp": "2026-05-08T15:26:47+00:00",
    "tools": {
      "components": [
        {
          "type": "application",
          "manufacturer": {
            "name": "Aqua Security Software Ltd."
          },
          "group": "aquasecurity",
          "name": "trivy",
          "version": "0.69.3"
        }
      ]
    },
    "component": {
      "bom-ref": "73565c21-b11d-4225-abae-473791aeb6f8",
      "type": "application",
      "name": "confluent-server-rest",
      "properties": [
        {
          "name": "aquasecurity:trivy:SchemaVersion",
          "value": "2"
        }
      ],
      "version": "8.0.5-1",
      "supplier": {
        "name": "Confluent",
        "url": [
          "https://confluent.io"
        ]
      },
      "publisher": "Confluent"
    }
  },
  "components": [
    {
      "bom-ref": "0519e6f2-522f-4c9f-8bed-e0d0dc06f15e",
      "type": "library",
      "group": "com.google.guava",
      "name": "listenablefuture",
      "version": "9999.0-empty-to-avoid-conflict-with-guava",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b421526c5f297295adef1c886e5246c39d4ac629"
        }
      ],
      "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "18541d95-ebd3-4cfd-b6bd-03bb215d03ce",
      "type": "library",
      "group": "com.google.guava",
      "name": "guava",
      "version": "32.0.1-jre",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6e5d51a72d142f2d40a57dfb897188b36a95b489"
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@32.0.1-jre",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/guava-32.0.1-jre.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "2fe5a585-aafa-4830-8562-94a4be7215f8",
      "type": "library",
      "group": "com.google.guava",
      "name": "guava",
      "version": "32.0.1-jre",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4601924dfa226c8718d22a35d36427a540440a55"
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@32.0.1-jre",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/kafka-clients-8.0.5-ce.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "3ea122b7-b982-4852-9958-a0d20655e993",
      "type": "library",
      "group": "com.google.code.findbugs",
      "name": "jsr305",
      "version": "3.0.2",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4601924dfa226c8718d22a35d36427a540440a55"
        }
      ],
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/kafka-clients-8.0.5-ce.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "4c698334-6504-48ee-8a19-0b3db1a45d85",
      "type": "library",
      "group": "com.google.guava",
      "name": "listenablefuture",
      "version": "9999.0-empty-to-avoid-conflict-with-guava",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4601924dfa226c8718d22a35d36427a540440a55"
        }
      ],
      "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/kafka-clients-8.0.5-ce.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "51511939-9dc4-46de-9b56-10ef79c56218",
      "type": "library",
      "group": "com.google.code.findbugs",
      "name": "jsr305",
      "version": "3.0.2",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        }
      ],
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/jsr305-3.0.2.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "741cf2ca-4b96-446b-86e0-7d8618e6483d",
      "type": "library",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "version": "1.7.36",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6c62681a2f655b49963a5983b8b0950a6120ae14"
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-servlet/slf4j-api-1.7.36.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "94fb7acb-61af-481a-8ce2-5e4db53b0587",
      "type": "library",
      "group": "com.google.guava",
      "name": "failureaccess",
      "version": "1.0.1",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
        }
      ],
      "purl": "pkg:maven/com.google.guava/failureaccess@1.0.1",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/failureaccess-1.0.1.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "cacb4c1c-2562-47ac-8acf-dad2448bba3e",
      "type": "library",
      "group": "com.google.j2objc",
      "name": "j2objc-annotations",
      "version": "2.8",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c85270e307e7b822f1086b93689124b89768e273"
        }
      ],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@2.8",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/j2objc-annotations-2.8.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "d0c640d1-6f42-4e39-bcef-3d741e2b3142",
      "type": "library",
      "group": "com.google.guava",
      "name": "failureaccess",
      "version": "1.0.1",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4601924dfa226c8718d22a35d36427a540440a55"
        }
      ],
      "purl": "pkg:maven/com.google.guava/failureaccess@1.0.1",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/kafka-clients-8.0.5-ce.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "dc460b33-af59-4ade-b066-b07d25ff4236",
      "type": "library",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "version": "1.7.36",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6c62681a2f655b49963a5983b8b0950a6120ae14"
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/slf4j-api-1.7.36.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "eb60b441-20bf-4272-a9d3-8c1e59f8ee5f",
      "type": "library",
      "group": "com.google.j2objc",
      "name": "j2objc-annotations",
      "version": "2.8",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4601924dfa226c8718d22a35d36427a540440a55"
        }
      ],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@2.8",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/kafka-clients-8.0.5-ce.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/at.yawk.lz4/lz4-java@1.10.2",
      "type": "library",
      "group": "at.yawk.lz4",
      "name": "lz4-java",
      "version": "1.10.2",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1df182cf1b030e347c81ca8768c24dab414a04d8"
        }
      ],
      "purl": "pkg:maven/at.yawk.lz4/lz4-java@1.10.2",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/lz4-java-1.10.2.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.github.luben/zstd-jni@1.5.6-6",
      "type": "library",
      "group": "com.github.luben",
      "name": "zstd-jni",
      "version": "1.5.6-6",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2fbdb6597ff51efa4a5bf12df18f27b5aa4f2625"
        }
      ],
      "purl": "pkg:maven/com.github.luben/zstd-jni@1.5.6-6",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/zstd-jni-1.5.6-6.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0",
      "type": "library",
      "group": "com.google.errorprone",
      "name": "error_prone_annotations",
      "version": "2.18.0",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "89b684257096f548fa39a7df9fdaa409d4d4df91"
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/error_prone_annotations-2.18.0.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.42.0",
      "type": "library",
      "group": "com.google.errorprone",
      "name": "error_prone_annotations",
      "version": "2.42.0",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4601924dfa226c8718d22a35d36427a540440a55"
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.42.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/kafka-clients-8.0.5-ce.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.confluent/ce-kafka-rest-extensions@8.0.5",
      "type": "library",
      "group": "io.confluent",
      "name": "ce-kafka-rest-extensions",
      "version": "8.0.5",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7e10293ff16d2cd6767458adb4d114646295029c"
        }
      ],
      "purl": "pkg:maven/io.confluent/ce-kafka-rest-extensions@8.0.5",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/ce-kafka-rest-extensions-8.0.5.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.confluent/ce-kafka-rest-servlet@8.0.5",
      "type": "library",
      "group": "io.confluent",
      "name": "ce-kafka-rest-servlet",
      "version": "8.0.5",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "57fc84d56eabe0538cd24a5a632cf04567041785"
        }
      ],
      "purl": "pkg:maven/io.confluent/ce-kafka-rest-servlet@8.0.5",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-servlet/ce-kafka-rest-servlet-8.0.5.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.confluent/common-utils@8.0.5",
      "type": "library",
      "group": "io.confluent",
      "name": "common-utils",
      "version": "8.0.5",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f24acaf8646336559015193696476e764875feab"
        }
      ],
      "purl": "pkg:maven/io.confluent/common-utils@8.0.5",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/common-utils-8.0.5.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0",
      "type": "library",
      "group": "jakarta.ws.rs",
      "name": "jakarta.ws.rs-api",
      "version": "3.1.0",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "15ce10d249a38865b58fc39521f10f29ab0e3363"
        }
      ],
      "purl": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/jakarta.ws.rs-api-3.1.0.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.checkerframework/checker-qual@3.33.0",
      "type": "library",
      "group": "org.checkerframework",
      "name": "checker-qual",
      "version": "3.33.0",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "de2b60b62da487644fc11f734e73c8b0b431238f"
        }
      ],
      "purl": "pkg:maven/org.checkerframework/checker-qual@3.33.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/checker-qual-3.33.0.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5",
      "type": "library",
      "group": "org.xerial.snappy",
      "name": "snappy-java",
      "version": "1.1.10.5",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ac605269f3598506196e469f1fb0d7ed5c55059e"
        }
      ],
      "purl": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/snappy-java-1.1.10.5.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "0519e6f2-522f-4c9f-8bed-e0d0dc06f15e",
      "dependsOn": []
    },
    {
      "ref": "18541d95-ebd3-4cfd-b6bd-03bb215d03ce",
      "dependsOn": []
    },
    {
      "ref": "2fe5a585-aafa-4830-8562-94a4be7215f8",
      "dependsOn": []
    },
    {
      "ref": "3ea122b7-b982-4852-9958-a0d20655e993",
      "dependsOn": []
    },
    {
      "ref": "4c698334-6504-48ee-8a19-0b3db1a45d85",
      "dependsOn": []
    },
    {
      "ref": "51511939-9dc4-46de-9b56-10ef79c56218",
      "dependsOn": []
    },
    {
      "ref": "73565c21-b11d-4225-abae-473791aeb6f8",
      "dependsOn": [
        "0519e6f2-522f-4c9f-8bed-e0d0dc06f15e",
        "18541d95-ebd3-4cfd-b6bd-03bb215d03ce",
        "2fe5a585-aafa-4830-8562-94a4be7215f8",
        "3ea122b7-b982-4852-9958-a0d20655e993",
        "4c698334-6504-48ee-8a19-0b3db1a45d85",
        "51511939-9dc4-46de-9b56-10ef79c56218",
        "741cf2ca-4b96-446b-86e0-7d8618e6483d",
        "94fb7acb-61af-481a-8ce2-5e4db53b0587",
        "cacb4c1c-2562-47ac-8acf-dad2448bba3e",
        "d0c640d1-6f42-4e39-bcef-3d741e2b3142",
        "dc460b33-af59-4ade-b066-b07d25ff4236",
        "eb60b441-20bf-4272-a9d3-8c1e59f8ee5f",
        "pkg:maven/at.yawk.lz4/lz4-java@1.10.2",
        "pkg:maven/com.github.luben/zstd-jni@1.5.6-6",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.42.0",
        "pkg:maven/io.confluent/ce-kafka-rest-extensions@8.0.5",
        "pkg:maven/io.confluent/ce-kafka-rest-servlet@8.0.5",
        "pkg:maven/io.confluent/common-utils@8.0.5",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0",
        "pkg:maven/org.checkerframework/checker-qual@3.33.0",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5"
      ]
    },
    {
      "ref": "741cf2ca-4b96-446b-86e0-7d8618e6483d",
      "dependsOn": []
    },
    {
      "ref": "94fb7acb-61af-481a-8ce2-5e4db53b0587",
      "dependsOn": []
    },
    {
      "ref": "cacb4c1c-2562-47ac-8acf-dad2448bba3e",
      "dependsOn": []
    },
    {
      "ref": "d0c640d1-6f42-4e39-bcef-3d741e2b3142",
      "dependsOn": []
    },
    {
      "ref": "dc460b33-af59-4ade-b066-b07d25ff4236",
      "dependsOn": []
    },
    {
      "ref": "eb60b441-20bf-4272-a9d3-8c1e59f8ee5f",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/at.yawk.lz4/lz4-java@1.10.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.luben/zstd-jni@1.5.6-6",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.42.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.confluent/ce-kafka-rest-extensions@8.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.confluent/ce-kafka-rest-servlet@8.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.confluent/common-utils@8.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.checkerframework/checker-qual@3.33.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5",
      "dependsOn": []
    }
  ],
  "vulnerabilities": []
}