{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:0fa8fb6a-79f9-577f-aa1e-bcb465455872",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-jcl",
      "version": "6.1.21-tuxcare.1",
      "purl": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:b52d1cde-5a4d-5a26-b5a6-53d6566dc03d",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.1 of org.springframework:spring-jcl. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f947380-9835-5a28-9f3f-b699833043fa",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e53c77d2-5393-5884-806a-63a0050472f2",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71e80d1c-af75-5cc9-ad30-25708302c6da",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9028b531-c085-59c3-b21d-b85eac009277",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0303a972-029c-5863-9bc2-534ec1386f19",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fab4e83d-42e6-5521-881b-c315bd312944",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22741 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3772514a-8d88-5ecf-a783-c6fc1122675f",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22745 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eea0f1d8-cf7b-5a24-8de6-51b5b5711f05",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e23406e-4dc8-5fec-a850-4e5d907ec359",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:453354db-0f40-5efc-8714-9b48bd135f12",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d68a84e-a4a2-5286-970f-16c3ce50e703",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d161c7b6-818b-57d6-b787-904d9ec741aa",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:158b6b70-85cf-5ca7-859e-fee8750f21fe",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a636d63c-8ff9-55d2-a70a-e8aaa6cd9688",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41844 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3575a741-7062-5cb9-a984-c52d76c2227d",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41845 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69b8db35-7e05-5b6e-bdb1-4178893ba6a9",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98dae78b-d2ef-58c3-9b19-77e0fa182ee2",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6716299e-f8ef-57d9-bda8-c292e06ccba5",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db39deb0-4e00-564b-8a2f-248fccaff603",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19954da6-30ad-5268-944f-838dc8ddce90",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85a6b4d9-0f00-553c-8804-a4008ebf070f",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:faf0977f-8e64-5f78-beb0-d4032e89a533",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2cbfca15-7be5-5519-a582-ce8fd1fe8974",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:782ee9c8-e152-5d7f-8956-772874c3a844",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db9798da-5747-593c-9734-f6c021fb9ec8",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47885 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19ff3585-79db-563d-b879-d087b8e4b037",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1c1b0ab-f918-5a59-9401-0adeec187a56",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9d50cd1-0fa1-53d0-87e9-c06e161164cf",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f115af2-af30-52ff-a770-94f2dc037022",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad34fbf2-7254-5be1-a433-01939d05fa54",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d366f945-112b-5564-b148-5a9847d36076",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47fb0518-0089-5b6c-9f21-0166ea804670",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d18b5d8e-d0e8-553d-853b-84648997c3bb",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3ea830d-3a6e-59ed-bd8e-5511c44e3ccb",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a90b3ef6-d5aa-5c3b-a0d4-2d99b6251779",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e39d44c8-4197-5afd-ad3c-6c1ccddb525c",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f257662f-7932-53a2-a71f-16f50efe2e94",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 6.1.21-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.1"
    }
  ]
}