{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:264620ce-bb6a-51c3-8cf8-69ec1b19c08c",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "6.1.15-tuxcare.2",
      "purl": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:14b01e71-fc8e-5155-bccd-c6545e61a125",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c16b971-6439-550d-b802-969c127b3259",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed9d9850-2f8b-56f3-93a8-c32aa3b1f0ca",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d743b65f-c8c7-5016-bc95-fe897daf8f66",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bdf6a0c-2938-56f0-92de-f40c445179a3",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ea7d7cb-9ace-514e-b5b8-a099368ddb68",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:534e241b-dbd6-5538-9f30-3865c7e629c6",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5681b47b-dc15-5b46-81ca-87407a07a5eb",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ddbffde-c43b-532f-9dc2-58575285f19c",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ddc0cf37-2a3c-5a4f-9eca-c94bae726652",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08f055a0-ee0d-5d99-94da-359bd81562e4",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88eec4ce-c5f5-5d5c-ab02-ca04ef1aa11f",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f09ee3d8-91de-5408-b359-1e02668a64a6",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57f0d036-6e30-5f14-8f8c-dd2fa00269fc",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23ce95d8-fdc0-5b06-aba4-019ef3c605da",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:912fbb8a-65c7-5446-99ee-ec4ffab9fc96",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bca3554f-8a4d-55eb-b6c4-a6c5ff11575e",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:331e0f52-830b-58aa-b99e-b0436cc1275d",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05399f7d-5497-5e84-ae71-1f56804c7b2c",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f55f3b7-5ce2-58f2-a7a7-350e4815693d",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f339c0a-7cab-5cfa-9546-fe6ce55b7e2b",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:405a2e00-433f-55bd-be39-74ad78ef5c1f",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6fec6c85-f17f-5425-a911-66a716b0693a",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42962c67-426c-513d-90eb-edb03a72059d",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4bb0b98-7ce6-51c9-ba26-f65a4428d36f",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f84b6e4e-9cb5-5f1b-92f4-58ce2e13196d",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:952e9d44-e367-5282-a1b0-1804b36e7bae",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9067cb1c-2ac9-5001-9fad-b19d864505f2",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47885 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b9afa74-7270-5942-8f14-b7a95aad45c8",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a534f727-1978-599f-b8a4-4557ce174264",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0013b86-cc05-591c-8a62-5c46ea310241",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5cdf8098-39c6-507f-b68b-0423e7a67687",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1cc5f6f9-5591-59f2-9d19-446146e0c2d8",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51dc2f68-04e7-5053-a95c-add95b8d3022",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94ac97f5-002a-567d-a21f-e304c3d4aa6c",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87b0a88a-4548-5fb7-a5fe-6c5bbaec1c45",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d6815b9-eb65-5d88-a17f-41cc95458650",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af0ebd89-d9d5-5488-a751-dbe6b3d553da",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f48dc3b-2929-5cd1-96d1-023fbb593b06",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18b16ce2-ddae-509e-a92c-04526ced522c",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
    }
  ]
}