{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:849af337-ba41-5a25-bebb-51d20496dc4e",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "6.0.23-tuxcare.5",
      "purl": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:190daa67-cf9e-5c3b-9002-ddbfc76ba12e",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3057df38-161e-5411-904b-f309de8ac268",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6c96931-da6f-5049-828f-43f758253e68",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7444400d-3abf-5cc4-9266-d51b72aa3a9a",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f68fc316-5f5b-5719-ba18-b37e0718fcae",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e415db0-fcfb-58e6-bca0-984f015c8f18",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e4525ba-29e3-50d2-8dd0-7f40d08eb563",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6986bfce-d5b1-5039-be59-0864278208f1",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:202254b7-2a09-5565-8472-c5cdc7ee34f4",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a916756-0198-58fb-9d74-4692c99395c9",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d67f9a20-45ee-563e-8a07-4793912805c8",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bff4786-5362-588e-b1a6-4bf62994f446",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a0c46b2-d168-5579-bedf-81faf5c67935",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6ad2dc3-125c-518b-a27e-d9a2432e4250",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56988154-3a48-53f6-8226-064b782194e7",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f83dea1f-c550-57c1-90f7-012b56674da1",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56071a3e-b20d-5d15-afe5-aaa0d6235585",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07f94822-3416-5dc0-addb-466601f53e63",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:877651d8-179a-547a-807b-b085d6007789",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:676fe33b-1224-507d-8baa-94613360de3e",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67a59487-179d-5820-b1d3-3e94e52d93e4",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec432928-b3b4-50fc-9b6d-64e47f389046",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c72c8dd5-c259-5c97-aa15-4352d54b1218",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a3ccd30-0efa-5960-8084-2b18e75711db",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5aef344-4e2c-507c-bf23-4e980efb9e6c",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c20299a-a612-5068-9ba2-c4db1f40755b",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:366b4f45-69f1-5801-ab7f-486a46263798",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2579fba3-453d-5d82-9afd-bb88724ab91c",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a69af08-9c0c-5a85-9914-8ce82ca70206",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45204d7a-a29c-56f1-a21b-066d52fce3fe",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b513a57b-277f-50f0-9d2a-d162422d5cbe",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1fae7fc2-e94d-599d-b185-2afee48d8095",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97de2df1-ab26-5b76-8008-77b9127becb0",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9cea54e2-9e2b-50e1-a355-a1d56aa98e5a",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78ad61b9-9d47-5b6a-a4c6-12b41d183a2a",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72568575-851c-5980-975e-c708be21371d",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:083cfbdc-272c-5325-b2e0-134cb251dd0b",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51292cfd-eed6-5b24-948a-673a2b55931e",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ac639f9-6088-53a5-a36d-472ed8a9c172",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36d586be-30f5-532c-9a30-bf94b19819fc",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3304503-85a7-5212-8e57-b24b8b9a64b8",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 6.0.23-tuxcare.5 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.5"
    }
  ]
}