{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b232b7b1-f04d-5d7d-b158-013b47b33302",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "5.3.39-tuxcare.20",
      "purl": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:8464bffa-4fbb-56cd-9cca-4962a8b6720e",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1de521e8-e71f-5b92-9f6d-300f30c6d35f",
      "id": "CVE-2022-22968",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2022-22968 does not affect version 5.3.39-tuxcare.20 of org.springframework:spring-orm. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5c45f76-0f07-5254-bb03-1b0f72dba50c",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09e70f0a-3ede-5820-8787-f805bce1023e",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:152c6a52-ebf2-5172-af82-600b599756bd",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:faba81a8-764c-50aa-81ae-942a68ac4e0c",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:208e5174-11d1-5a12-add8-fe5959273937",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c43c0fc5-74c5-5a57-b2eb-05e961641bc9",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-orm 5.3.39-tuxcare.20."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4adea9a5-932b-51b0-8490-da820a65d271",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2797937-83ed-5bc6-af1a-f6cd096709ca",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ffd8294-6eb0-57f0-857c-5dea1f3667a7",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cda3e0ed-b475-51f1-9403-2d636eb6cc23",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a64741f-a47c-5510-83f1-aa90d2ed007d",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12cfabee-3e97-5c20-a6aa-d2317a527d91",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a381b4e-109e-5aba-9a32-b0190d9357e7",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c261a7e2-e7ab-5e71-a067-1d1ef5ace8c9",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a22650af-4b8f-5f6f-b5fd-e880c8565172",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d3e254a-5ba5-5497-a8ee-9cb47aa1de3b",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dcf335eb-eb8f-5c50-aeca-28b552bdd51f",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b04fb968-2d42-55bc-82ea-cfcbc7a69e66",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fc9228f-15cb-589a-9469-0ce4e5c83fe5",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d82e99d-6fd0-5f7a-9785-38e10f07eb41",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:128193ac-5b3c-511c-988a-64f4c2285367",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7e5b91f-864c-503a-938d-d4ae90a33fa1",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b84ca54-9814-52e0-8b6f-a8d6c8dbcd21",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a9eef9a-b02c-575b-bbeb-13e78e517722",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a103e75b-a085-5027-aaf8-01a05104cb5f",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9a7ba66-15be-5bd6-9a95-c239d6e98af9",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d80be76-4f23-5745-bda9-bf864d727e8f",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a9480fa-1082-53d2-9c64-b90e962cce40",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bdcfbf1-8bbe-503c-b554-a803135993da",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92ef0959-5ce3-59b9-a2f2-a3cec6375ad6",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23618f9a-e2a9-54ce-9e6a-916d3c49bcd1",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03c5cd93-0057-5439-bb0f-31f9ff11325b",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:203f489b-ef0a-5620-af85-d21940b3e6fe",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7598d4e7-dd43-59f6-93f1-4ed0a80239d8",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2ff6299-feae-5bb5-b924-08f79cbed440",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:acd66346-a9d0-5875-a90a-0ccae37760bd",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0721e839-d0e3-5aaf-89d8-cf7f73a461ef",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ed230ad-df02-5bb3-bf38-dc3c181c4a99",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e11807b-6b5f-583f-aa08-97b23f586405",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6b0bbad-c646-5994-9afe-ae8c6e4cd05a",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a05a8757-8b75-51c8-abbc-03a16c3b8344",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27941eb2-95b2-561d-aa7f-a27d3814e4c2",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f85d9bd6-807e-5666-8483-cc14cd1b7ea8",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee3e47f8-7913-500e-9544-7a14dee742a8",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35030448-f560-502d-9f15-116194e2ab56",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.39-tuxcare.20 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.20"
    }
  ]
}