{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d442bbbe-b0ef-5424-a550-1caf38a2cbcd",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "6.1.21-tuxcare.11",
      "purl": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:6c12b0a7-c18f-5c47-b5b9-a03735b9bb4f",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.11 of org.springframework:spring-orm. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf51ef53-6e30-5ad1-9fce-67df5315c655",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51b9f9ef-b504-50d5-868d-32687a98894d",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17400e9d-2452-5d05-a86b-c8530623b4ce",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6227f418-1c88-5702-8c86-6681492ef9c8",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b79530a-4539-5e28-9383-3f2ca6105acd",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bda59557-97f7-5a46-ba2d-dd16b10adf78",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea818529-b115-5d00-a917-9ba5684f5d1b",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41193f44-ab10-569e-8e3c-63437731d2a3",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31f692e8-ba8b-54dc-ab5d-63ffb24d8f1c",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f051a7a2-4e5e-5c77-94df-d0fed3af5d10",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69a8a3c6-d2f1-597d-8505-66d3fa2729e7",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a57b4245-c6b5-58ed-9231-7bfb746ab886",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00f504b2-11cc-5053-b728-ecf2de17fc36",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d4e92b6-272e-5754-b746-1fef3e197559",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37ce0d44-69fb-5799-9107-e32ecbfa7b75",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c5f2615-9557-52a9-bdd3-22c6fd01bf64",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9246ac05-889c-5322-8ae3-2025c13dfb45",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d11c91a8-1131-5f93-9f35-beb4b75ef026",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb6f4290-0e21-5d44-bd1d-4225c3d7d698",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd954460-9241-5c06-bf4b-392aa52bb28d",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aaebaf16-23ee-5430-b770-c6101563ad61",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0990021e-f6c3-5f59-86f0-1bf3baf7c4c7",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:009c11da-deab-586b-8f45-d34282dc2b6a",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7757e94f-2e48-5922-8900-69f7a48f49df",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5adc498-0add-56b6-babe-9ccfe8de6a69",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47f1a430-cc2e-5c5c-a1e1-02fd828cf436",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f959d146-9358-587f-985e-29f9c2ccc272",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:386bf511-7471-57fc-adb5-a697e8125a94",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:001f5cca-f594-5aa1-a088-57365758a2bd",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b4761cc-3876-5e43-bc31-d94850621fa4",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f1f4919-46b3-5cad-a4e9-b92772318ce9",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:010f54f8-ab1f-5a8f-aca8-8ac3e2d5ae71",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d66683f-934c-5c51-9eab-c26efce40ce9",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59962bbe-8ba9-5761-8305-67cce5219d79",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0bb64d84-0535-5207-8b7b-fb5dd8db4916",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:197b7b7d-044c-5537-92ce-4256db097e4a",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7eac6aa-b179-52f8-9e76-e055190e14a5",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6df0635a-f750-5f2f-8bd5-7544770d3501",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.11"
    }
  ]
}