{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e7eeab53-a972-58b2-8577-942a0416a3e9",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "6.1.13-tuxcare.1",
      "purl": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:cd206734-d081-53d2-a377-6e708ada9006",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38819 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96e856a4-923a-5d88-820d-0f3bd849b107",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36eb0690-84e0-5296-b105-58f5de891431",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:458bd6cf-a163-540a-a50c-40355db4120d",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6896c2e8-a9b5-519d-9eda-2411e2eef7d1",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a82d0d45-bc37-5cce-ae93-208855bde61c",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:900403bf-2fb1-5abf-96c7-9255f65dbc2d",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:687275e7-202b-5ead-b978-fe818fdc8fe1",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9428c7e4-8d3e-50d1-8e50-1be115a8503b",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24776210-7836-5298-9fb5-2db8292c8854",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4caed6fd-e14f-5b09-b728-d36756f5bd84",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22741 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e75208f9-9d3a-5f78-b268-3651cfbac4e5",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22745 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03d5b697-38b0-5179-b449-36fe377f94df",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9210afb3-fadb-55eb-8f4f-5627f5114a2f",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79ff573f-c990-5a70-9d5a-cb724c0f8efe",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6c70be7-0f22-5e89-877b-e9768d677bd0",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:593a5a76-8f35-5702-8879-498e47005dd3",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed2d26d9-9694-51b1-8c7f-6f575a28408b",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0778ff74-414e-5a88-b2a9-37b3c40d35ba",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2a4e6d2-22a8-5795-a65c-3688d1e97d90",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85f66de9-21f1-5de5-bc5d-61360a5273b1",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae2155a2-4731-508b-a32b-015060c7f832",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:283f9182-7eb4-5cc3-8303-e2a12483e09e",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29afb67c-1c46-5103-87c2-b61c6dd76717",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:791bc993-9160-5bc4-a3e9-ae315172b24b",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:242f0dc3-b785-5140-928f-f626e213e64d",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5691075a-f813-5ff7-ac74-b327dce2b61d",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:891a3eec-cab1-5cd3-9c0b-c0b6bb89bb4b",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a82ec2ff-4222-52de-a5e3-7aa8881d19a9",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bdfa6bf-4ea4-589c-b96b-ac8be864a387",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47885 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e290c0f8-6c22-5cda-93c7-2520b5d7f475",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28dbb9a4-dc4d-5967-ba4e-fa5b96943c1b",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88eb1ee5-4f86-5231-ba27-916de1a536a9",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:256c8479-1d98-54c5-a2da-b67153ea3904",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a076dd9e-c4e5-5c46-b308-4783f37b10a4",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a83f151-eb24-520a-8100-8ef5d4842fb2",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62226e92-37cb-5b20-80e1-b7d0d83f4bf0",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52811cfd-7a90-5a5d-bbf4-dc046385b9c3",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59a29704-4439-5914-838b-79b12f39535f",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d17d1f4-e8b3-52f8-ae41-f5f4e25c48d4",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d052820-4efb-5c85-b4c7-12b0b15b04fa",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9457d704-14c3-53f9-a255-7b29b589c7ac",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 6.1.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.1"
    }
  ]
}