{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9d63e4a2-3b3e-582e-894d-beb7262e74c5",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework.boot/spring-boot-test-autoconfigure@3.4.13-tuxcare.2",
      "type": "library",
      "group": "org.springframework.boot",
      "name": "spring-boot-test-autoconfigure",
      "version": "3.4.13-tuxcare.2",
      "purl": "pkg:maven/org.springframework.boot/spring-boot-test-autoconfigure@3.4.13-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:d41c2308-189f-5cf6-bc55-db741c903fc4",
      "id": "CVE-2026-22731",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22731 is fixed in version 3.4.13-tuxcare.2 of org.springframework.boot:spring-boot-test-autoconfigure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-test-autoconfigure@3.4.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:583c14da-d3db-57bd-9a0d-0f69760cb408",
      "id": "CVE-2026-22733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22733 is fixed in version 3.4.13-tuxcare.2 of org.springframework.boot:spring-boot-test-autoconfigure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-test-autoconfigure@3.4.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e8f2f48-3a65-5382-bfc6-079deb2cda52",
      "id": "CVE-2026-40972",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40972 is fixed in version 3.4.13-tuxcare.2 of org.springframework.boot:spring-boot-test-autoconfigure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-test-autoconfigure@3.4.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:651d4da0-d255-549a-8c0a-6105761c4d68",
      "id": "CVE-2026-40973",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40973 is fixed in version 3.4.13-tuxcare.2 of org.springframework.boot:spring-boot-test-autoconfigure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-test-autoconfigure@3.4.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0e3e21f-8c60-5add-968f-e86a1240a969",
      "id": "CVE-2026-40974",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40974 affects version 3.4.13-tuxcare.2 of org.springframework.boot:spring-boot-test-autoconfigure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-test-autoconfigure@3.4.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9bfc237-d7cf-59b6-a734-0ab2ed035d9b",
      "id": "CVE-2026-40975",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40975 affects version 3.4.13-tuxcare.2 of org.springframework.boot:spring-boot-test-autoconfigure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-test-autoconfigure@3.4.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:813726ff-a52a-5f4c-a3c0-cd2c282a702c",
      "id": "CVE-2026-40977",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40977 affects version 3.4.13-tuxcare.2 of org.springframework.boot:spring-boot-test-autoconfigure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-test-autoconfigure@3.4.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80dacc58-53dd-52cd-809c-065cc270c17c",
      "id": "CVE-2026-40992",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40992 affects version 3.4.13-tuxcare.2 of org.springframework.boot:spring-boot-test-autoconfigure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-test-autoconfigure@3.4.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29f866f5-1dd1-5f11-8114-61421eb58af1",
      "id": "CVE-2026-41001",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41001 affects version 3.4.13-tuxcare.2 of org.springframework.boot:spring-boot-test-autoconfigure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-test-autoconfigure@3.4.13-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.boot/spring-boot-test-autoconfigure@3.4.13-tuxcare.2"
    }
  ]
}