{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b1ce241a-218b-5b2c-abe5-67e95261f91d",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-instrument",
      "version": "6.1.16-tuxcare.1",
      "purl": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:182c4eba-740f-5fcb-a43e-4e2d169ab9fb",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45aa81a1-7ed5-585a-9e31-5e024f92634e",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41234 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33f4e8cd-d56b-55a1-bdb2-6e57835a1a01",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc014ffb-c84e-5e65-950b-39375230d171",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9333a00-6ae8-5b73-94f5-b976d44b5cd3",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dab8c964-03a0-54e1-92a7-2b0ff2125fa9",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04020ed4-8fec-5df8-ac01-adac6949d4df",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:295f6c6b-f7ce-5f3d-a1b8-8c28fabd7f80",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72e74c79-6bf4-58a5-9a97-693c918df0a2",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22741 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df6b4abe-58f5-553b-96e2-03d731b5d0dd",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22745 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83e62f20-3ea3-5e99-a16d-580d2b3e36a2",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c9c994d-705f-578d-acfe-56b575bc5714",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d69b6466-6fab-5470-ba19-a4c331efbc4e",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:858b6692-fb33-5868-a1eb-2c2646636218",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b2ee313-f737-54a1-92b9-ae1e4785faec",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2fb5047-feee-53c7-9df5-8ffadfa71131",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:087b4758-26e0-58ac-b9f1-8f07abe9e019",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41844 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2ab7429-01ed-510e-af04-b1c09934fc68",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41845 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0695833-32ce-55bf-8568-bf955d5f67ec",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9d10910-7c45-53d3-9561-a7794b79b56c",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a616b06-9586-53ca-8328-d9d564f8a9b1",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:132e9c6c-b058-534e-a959-642a88a88d55",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3573bfa5-3e15-57bf-a8b1-1dbc56e0039c",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:deb21534-84b3-5fa4-8b00-679f694cb71a",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e6edce3-5517-5383-b2fe-a2bc063cd23b",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9933ee3-a0d0-51c2-a7d0-be77ec3865e9",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5dd564a2-0fae-5510-be9d-08e8312eb071",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ceb437b0-b89f-5f1e-9ef8-2c04884af590",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47885 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d3fca4b-17b1-58aa-ad26-54febdcc6209",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2b8e64a-411d-5107-9a95-1978b976af30",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:039caf91-a4fc-5a69-bfe7-12570a589533",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0936b09-6fa0-5d65-b72f-2d6e9fa0ab72",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cae83fda-78b3-5284-b6f5-b57655723291",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a7b2f58-939a-5e9b-92eb-43aa77f78ab5",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4bfc7357-fb5a-5423-a411-3fb74e6e6c5e",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0622a2c-0eec-5a5d-b660-af719f735398",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29f87285-5784-58b6-b3ad-334d5d0ff314",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fda508fa-338a-5fe2-aabc-f6eaa8c16cb7",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ab490ac-ea36-5b49-be9b-aa72b29d1e22",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb38ff33-971a-51ec-b4a5-8c9c120e9d41",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
    }
  ]
}