{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b5404571-a66f-5814-b6c1-987781839b9a",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.4.6-tuxcare.10",
      "type": "library",
      "group": "org.springframework.boot",
      "name": "org.springframework.boot.gradle.plugin",
      "version": "2.4.6-tuxcare.10",
      "purl": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.4.6-tuxcare.10"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:fc24f66e-9508-58b8-964d-7fcf5ffd1819",
      "id": "CVE-2022-22965",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22965 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.4.6-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0c1283c-3c61-53a6-859c-46e312492706",
      "id": "CVE-2023-20873",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20873 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.4.6-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f0ebf35-9206-5e0b-a3d2-ca16f20370a6",
      "id": "CVE-2023-20883",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20883 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.4.6-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b16b8c68-df21-54b2-8cff-5f0eef98e76b",
      "id": "CVE-2023-34055",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34055 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.4.6-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62111c0c-ae7a-5d99-913a-1a023d40d98a",
      "id": "CVE-2023-38286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-38286 affects version 2.4.6-tuxcare.10 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.4.6-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1327feb8-987b-557c-81a8-fcc6d58c0b10",
      "id": "CVE-2024-38807",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38807 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.4.6-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e18b95f-bbe1-5f53-a285-55a28552f3a4",
      "id": "CVE-2025-22235",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22235 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.4.6-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96658b6b-216b-5fb2-8757-326df1a577e4",
      "id": "CVE-2026-22733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22733 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.4.6-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd8c7436-9f7e-545e-a1a9-e55d326a663b",
      "id": "CVE-2026-40972",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40972 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.4.6-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:934e4e2c-b338-5738-b574-570eff3eea99",
      "id": "CVE-2026-40973",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40973 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.4.6-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5cf7e485-8f76-5ee6-b444-c3dbd5fcc63f",
      "id": "CVE-2026-40974",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40974 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.4.6-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1073064-949b-5495-af74-48b0082ea392",
      "id": "CVE-2026-40975",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40975 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.4.6-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2eb6fcb0-6e94-502a-91e4-5e368b55eb28",
      "id": "CVE-2026-40977",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40977 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.4.6-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e85c5aa9-0680-58f0-a9dc-921fba5d7444",
      "id": "CVE-2026-40992",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-40992 does not affect version 2.4.6-tuxcare.10 of org.springframework.boot:org.springframework.boot.gradle.plugin. version is out of affected scope 3.4.0 - 3.4.16, 3.5.0 - 3.5.14, 4.0.0 - 4.0.6; MailProperties has no Ssl class and the mail autoconfigure package has zero ssl references, so the vulnerable mail SSL auto-config code path is not present"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.4.6-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:244963c3-4897-5ac3-8473-ae24f4959fd6",
      "id": "CVE-2026-41001",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41001 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.4.6-tuxcare.10"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.4.6-tuxcare.10"
    }
  ]
}