{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2c547345-5aaf-5463-9c43-8d39253efd76",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "6.0.23-tuxcare.6",
      "purl": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:112783e8-7576-595b-91ae-249358d77531",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ffe4e633-c750-5990-ab15-54abeeb26a14",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18011ed9-2de3-5be4-85f4-9f1069f004cc",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:636b88b7-2664-53f2-832d-db195271a476",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a35b0f45-899b-504c-b223-29477bb0bd51",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77152333-53a8-5329-8d05-b2fc7df1f067",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f239625-e6c4-5ffb-916a-ca692881a217",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16e414d1-6d3c-560e-b5b5-8af2e62522db",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85e815c7-650e-5ac5-9af7-d5020210a797",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbd51e3c-6eb3-528b-b7e5-d5313ee828d5",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:958ed8de-bedb-5c26-97ca-df66f9dc7fd7",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:536e58ed-e175-591c-8071-67a61e558c47",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f82ec0b-46da-5fda-8c86-6fbc1f633d05",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0df152e6-399c-5661-9bed-015d7aac871e",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fda7726-dbbf-570a-bff0-0c9e6d6b38d1",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64c9bc64-e822-534c-ae1a-ac0035b58820",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:facb73a8-7663-5c80-a825-83e28ae95597",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fd05c47-db00-5f0e-9508-368a0090f3ce",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e18bd6cf-42a2-5a9d-9261-a1eebc3d1730",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:387c8619-dfd6-5d2f-b693-3966af9821cf",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ccd6bf8-1de2-5e36-8d53-227e41bc3874",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c42f497-863c-5fd4-bafc-2b7aa723e115",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2d3b0bc-7924-54db-9ab6-faeeb8785824",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b74ca43-217d-5763-bd4c-71ddb32c6186",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4cf7365-43e6-5a3e-8bbf-0670084460c1",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:131030dd-871d-56c6-a263-51f93ce93930",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ed2df49-b4c3-5af2-8619-ba753971337b",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17c66a6a-17ec-57ca-a8f5-47607e4247c8",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7d6a40e-f3f1-5959-9db7-1c76cbd303cc",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2957d40a-190c-5f70-a6d5-7347da4e6f07",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:010dd7ec-b334-5152-a202-d5201a46312f",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9635a861-9542-50b4-8abe-7aa1e3ef2ae5",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1660f02-6f22-53d4-a83d-89f856d5b985",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d0fd1d3-9f0a-5f41-bd47-8cd2c4b06860",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bda6aa0-41b6-56d6-aa92-7c43c4c3fa29",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27b4fc87-c407-5f70-a0e7-f6b0fbb7f762",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:314dcb96-ffc0-50c1-8b59-39cf46f6f0ce",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:469fbef2-e64b-5748-aae5-ecbe9679eb23",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07fba306-d809-5c9a-a773-6e3731cb5288",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cde7cfe-faf8-5ccb-8a6e-3512ed756966",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b15f2290-65bf-543f-9971-fbb1ce2d3698",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 6.0.23-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.6"
    }
  ]
}