{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d572681c-d877-58f6-a07a-513eccca4c28",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "6.1.16-tuxcare.2",
      "purl": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:ea08b583-edd7-520d-a851-736897e7cd79",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed6fce00-28bc-5089-8ce7-1b4f0cbe41e3",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41234 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9a77619-8fe6-5b1d-abb5-5bb1953827ca",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1539e850-08a6-5747-a248-b615d73de701",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc96b8f8-ffb9-52fd-bbbb-7d12ec0c30f7",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:479e5539-86ba-55d2-b780-6286e745ef04",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8526eb7-af47-509d-be71-398835bc79c8",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d04983b-61e9-5ad0-9268-168c663bcfab",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dea99f94-8223-5982-8a67-844a34d4cf6b",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c91381b-c460-5c18-b0a8-283e3f980e7e",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05daead9-261c-579c-b383-efc58f75de99",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab20bc1a-5309-5fd0-96cf-6bf0a1c1f35f",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca6fe683-756d-533c-aaf0-06990c1792a8",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8106594c-3753-5901-82f3-e5d15f9e8f53",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9734e4ed-f984-5550-93d4-808e6fe65546",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31c5b45a-808b-5f9a-95de-deaad2b17186",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1c6128a-6af8-5643-8185-61e66ce4cc3c",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41844 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:079a39bb-af36-5f94-b7db-c91567ef5c4e",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7999f94c-22ca-5cb5-b731-23a6ae778c22",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1be0efa1-a6da-555c-8610-053c83103eb1",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b1a9a05-b349-5f9b-8a02-5b0fd856e57b",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb67ee39-f8e8-5f12-8caf-f0c22116fc0d",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:285ac0ff-9530-551b-8da2-fe6af5084994",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98f8205c-59d6-5e4a-bea3-a281f9f62d48",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e99ff594-ba9b-5711-a3d2-16972707dc6c",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e43485c1-9fc3-50f8-84c8-d89116e056ad",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc88062f-fc0a-57aa-bc39-77415a3a60de",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cef65eb5-bb7e-5065-9850-5a55e74b41b8",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47885 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2793f0f2-eedb-5cd1-a9a9-1306718d61a5",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d896611-19a5-55d9-ba38-011e804b2ed1",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4aa87744-823b-5994-8846-2540932efaae",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11dcdb81-8683-5557-9794-df8ccc8e2903",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bd22459-d736-5128-bfb2-cf34635357f4",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:380c10b6-fba9-5688-9828-4de8ef21c32c",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17af3fdc-37a1-5e5e-bd14-842b14c6afd2",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd0cd98e-e84e-5b64-96a4-66114da703ec",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fda16d06-5dfc-54f9-a7c5-be32f10f6e11",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f10cc78e-e9b0-5352-841f-e85427db1dde",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06076faf-b554-5bb8-a2ee-905bbf0701d8",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b374f0a6-4106-5626-8ace-24b332f7131c",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 6.1.16-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.2"
    }
  ]
}