{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9140190c-2886-4dd5-893a-f08838249a29",
  "version": 1,
  "metadata": {
    "timestamp": "2026-06-11T17:06:46+00:00",
    "tools": {
      "components": [
        {
          "type": "application",
          "manufacturer": {
            "name": "Aqua Security Software Ltd."
          },
          "group": "aquasecurity",
          "name": "trivy",
          "version": "0.69.3"
        }
      ]
    },
    "component": {
      "bom-ref": "122e95d2-00f3-4648-b0f6-66ba73f2b4a4",
      "type": "application",
      "name": "confluent-server-rest",
      "properties": [
        {
          "name": "aquasecurity:trivy:SchemaVersion",
          "value": "2"
        }
      ],
      "version": "8.0.6-1",
      "supplier": {
        "name": "Confluent",
        "url": [
          "https://confluent.io"
        ]
      },
      "publisher": "Confluent"
    }
  },
  "components": [
    {
      "bom-ref": "10057850-8d25-42ab-8930-04303bc986c9",
      "type": "library",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "version": "1.7.36",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6c62681a2f655b49963a5983b8b0950a6120ae14"
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/slf4j-api-1.7.36.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "398da4d2-cd18-4490-9737-4add480f6a80",
      "type": "library",
      "group": "com.google.guava",
      "name": "failureaccess",
      "version": "1.0.1",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
        }
      ],
      "purl": "pkg:maven/com.google.guava/failureaccess@1.0.1",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/failureaccess-1.0.1.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "4d8b5b46-95c8-4ecf-a3e8-3a6291e4b593",
      "type": "library",
      "group": "com.google.guava",
      "name": "guava",
      "version": "32.0.1-jre",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6e5d51a72d142f2d40a57dfb897188b36a95b489"
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@32.0.1-jre",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/guava-32.0.1-jre.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "59dff7ad-1353-4309-aaf2-4974098c9397",
      "type": "library",
      "group": "com.google.guava",
      "name": "listenablefuture",
      "version": "9999.0-empty-to-avoid-conflict-with-guava",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b421526c5f297295adef1c886e5246c39d4ac629"
        }
      ],
      "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "66827116-41a4-4ef3-b382-9a081b1e0e5b",
      "type": "library",
      "group": "com.google.guava",
      "name": "failureaccess",
      "version": "1.0.1",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "01da93d59eb9a0bdb36d53aec62cf9ac7ad2c8c7"
        }
      ],
      "purl": "pkg:maven/com.google.guava/failureaccess@1.0.1",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/kafka-clients-8.0.6-ce.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "85ea277d-50f7-413a-a78e-fda8ecffc39c",
      "type": "library",
      "group": "com.google.j2objc",
      "name": "j2objc-annotations",
      "version": "2.8",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c85270e307e7b822f1086b93689124b89768e273"
        }
      ],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@2.8",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/j2objc-annotations-2.8.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "8ee1ff49-76f5-4f55-8e24-3e137b902588",
      "type": "library",
      "group": "com.google.guava",
      "name": "listenablefuture",
      "version": "9999.0-empty-to-avoid-conflict-with-guava",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "01da93d59eb9a0bdb36d53aec62cf9ac7ad2c8c7"
        }
      ],
      "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/kafka-clients-8.0.6-ce.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "a37d6610-161d-4d85-bfa2-20218398808e",
      "type": "library",
      "group": "com.google.j2objc",
      "name": "j2objc-annotations",
      "version": "2.8",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "01da93d59eb9a0bdb36d53aec62cf9ac7ad2c8c7"
        }
      ],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@2.8",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/kafka-clients-8.0.6-ce.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "af37da20-ec94-4a2f-b283-c226d516f0ef",
      "type": "library",
      "group": "com.google.guava",
      "name": "guava",
      "version": "32.0.1-jre",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "01da93d59eb9a0bdb36d53aec62cf9ac7ad2c8c7"
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@32.0.1-jre",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/kafka-clients-8.0.6-ce.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "b70734e2-0a45-4ea6-a503-45b2404ad594",
      "type": "library",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "version": "1.7.36",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6c62681a2f655b49963a5983b8b0950a6120ae14"
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-servlet/slf4j-api-1.7.36.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "c5dc2cf3-9ab5-4c78-ac66-d7a36bda25da",
      "type": "library",
      "group": "com.google.code.findbugs",
      "name": "jsr305",
      "version": "3.0.2",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        }
      ],
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/jsr305-3.0.2.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "f24593bf-8e06-4340-9063-4bee0eb25460",
      "type": "library",
      "group": "com.google.code.findbugs",
      "name": "jsr305",
      "version": "3.0.2",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "01da93d59eb9a0bdb36d53aec62cf9ac7ad2c8c7"
        }
      ],
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/kafka-clients-8.0.6-ce.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/at.yawk.lz4/lz4-java@1.10.2",
      "type": "library",
      "group": "at.yawk.lz4",
      "name": "lz4-java",
      "version": "1.10.2",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1df182cf1b030e347c81ca8768c24dab414a04d8"
        }
      ],
      "purl": "pkg:maven/at.yawk.lz4/lz4-java@1.10.2",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/lz4-java-1.10.2.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.github.luben/zstd-jni@1.5.6-10",
      "type": "library",
      "group": "com.github.luben",
      "name": "zstd-jni",
      "version": "1.5.6-10",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7e146ecb598af55d1f64d1c118af27569a848558"
        }
      ],
      "purl": "pkg:maven/com.github.luben/zstd-jni@1.5.6-10",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/zstd-jni-1.5.6-10.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0",
      "type": "library",
      "group": "com.google.errorprone",
      "name": "error_prone_annotations",
      "version": "2.18.0",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "89b684257096f548fa39a7df9fdaa409d4d4df91"
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/error_prone_annotations-2.18.0.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.42.0",
      "type": "library",
      "group": "com.google.errorprone",
      "name": "error_prone_annotations",
      "version": "2.42.0",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "01da93d59eb9a0bdb36d53aec62cf9ac7ad2c8c7"
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.42.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/kafka-clients-8.0.6-ce.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.confluent/ce-kafka-rest-extensions@8.0.6",
      "type": "library",
      "group": "io.confluent",
      "name": "ce-kafka-rest-extensions",
      "version": "8.0.6",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ba6a16257f139d3887547401de8d0d31c11241d6"
        }
      ],
      "purl": "pkg:maven/io.confluent/ce-kafka-rest-extensions@8.0.6",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/ce-kafka-rest-extensions-8.0.6.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.confluent/ce-kafka-rest-servlet@8.0.6",
      "type": "library",
      "group": "io.confluent",
      "name": "ce-kafka-rest-servlet",
      "version": "8.0.6",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3dae10538d66aee64fd4ace500c649262cac7ba2"
        }
      ],
      "purl": "pkg:maven/io.confluent/ce-kafka-rest-servlet@8.0.6",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-servlet/ce-kafka-rest-servlet-8.0.6.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/io.confluent/common-utils@8.0.6",
      "type": "library",
      "group": "io.confluent",
      "name": "common-utils",
      "version": "8.0.6",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cd532721cea73015712bdd4a472d00d331905ec1"
        }
      ],
      "purl": "pkg:maven/io.confluent/common-utils@8.0.6",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/common-utils-8.0.6.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0",
      "type": "library",
      "group": "jakarta.ws.rs",
      "name": "jakarta.ws.rs-api",
      "version": "3.1.0",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "15ce10d249a38865b58fc39521f10f29ab0e3363"
        }
      ],
      "purl": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/jakarta.ws.rs-api-3.1.0.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.checkerframework/checker-qual@3.33.0",
      "type": "library",
      "group": "org.checkerframework",
      "name": "checker-qual",
      "version": "3.33.0",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "de2b60b62da487644fc11f734e73c8b0b431238f"
        }
      ],
      "purl": "pkg:maven/org.checkerframework/checker-qual@3.33.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/checker-qual-3.33.0.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    },
    {
      "bom-ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8",
      "type": "library",
      "group": "org.xerial.snappy",
      "name": "snappy-java",
      "version": "1.1.10.8",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ccbaa2b5ea6a023a27c44daf2d6cdec0e138592d"
        }
      ],
      "purl": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8",
      "properties": [
        {
          "name": "aquasecurity:trivy:FilePath",
          "value": "usr/share/java/ce-kafka-rest-extensions/snappy-java-1.1.10.8.jar"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "jar"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "10057850-8d25-42ab-8930-04303bc986c9",
      "dependsOn": []
    },
    {
      "ref": "122e95d2-00f3-4648-b0f6-66ba73f2b4a4",
      "dependsOn": [
        "10057850-8d25-42ab-8930-04303bc986c9",
        "398da4d2-cd18-4490-9737-4add480f6a80",
        "4d8b5b46-95c8-4ecf-a3e8-3a6291e4b593",
        "59dff7ad-1353-4309-aaf2-4974098c9397",
        "66827116-41a4-4ef3-b382-9a081b1e0e5b",
        "85ea277d-50f7-413a-a78e-fda8ecffc39c",
        "8ee1ff49-76f5-4f55-8e24-3e137b902588",
        "a37d6610-161d-4d85-bfa2-20218398808e",
        "af37da20-ec94-4a2f-b283-c226d516f0ef",
        "b70734e2-0a45-4ea6-a503-45b2404ad594",
        "c5dc2cf3-9ab5-4c78-ac66-d7a36bda25da",
        "f24593bf-8e06-4340-9063-4bee0eb25460",
        "pkg:maven/at.yawk.lz4/lz4-java@1.10.2",
        "pkg:maven/com.github.luben/zstd-jni@1.5.6-10",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.42.0",
        "pkg:maven/io.confluent/ce-kafka-rest-extensions@8.0.6",
        "pkg:maven/io.confluent/ce-kafka-rest-servlet@8.0.6",
        "pkg:maven/io.confluent/common-utils@8.0.6",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0",
        "pkg:maven/org.checkerframework/checker-qual@3.33.0",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8"
      ]
    },
    {
      "ref": "398da4d2-cd18-4490-9737-4add480f6a80",
      "dependsOn": []
    },
    {
      "ref": "4d8b5b46-95c8-4ecf-a3e8-3a6291e4b593",
      "dependsOn": []
    },
    {
      "ref": "59dff7ad-1353-4309-aaf2-4974098c9397",
      "dependsOn": []
    },
    {
      "ref": "66827116-41a4-4ef3-b382-9a081b1e0e5b",
      "dependsOn": []
    },
    {
      "ref": "85ea277d-50f7-413a-a78e-fda8ecffc39c",
      "dependsOn": []
    },
    {
      "ref": "8ee1ff49-76f5-4f55-8e24-3e137b902588",
      "dependsOn": []
    },
    {
      "ref": "a37d6610-161d-4d85-bfa2-20218398808e",
      "dependsOn": []
    },
    {
      "ref": "af37da20-ec94-4a2f-b283-c226d516f0ef",
      "dependsOn": []
    },
    {
      "ref": "b70734e2-0a45-4ea6-a503-45b2404ad594",
      "dependsOn": []
    },
    {
      "ref": "c5dc2cf3-9ab5-4c78-ac66-d7a36bda25da",
      "dependsOn": []
    },
    {
      "ref": "f24593bf-8e06-4340-9063-4bee0eb25460",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/at.yawk.lz4/lz4-java@1.10.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.luben/zstd-jni@1.5.6-10",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.42.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.confluent/ce-kafka-rest-extensions@8.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.confluent/ce-kafka-rest-servlet@8.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.confluent/common-utils@8.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.checkerframework/checker-qual@3.33.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8",
      "dependsOn": []
    }
  ],
  "vulnerabilities": []
}