{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:cc0615d5-3206-53a1-8525-5d2d9fe0db59",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-orm",
      "purl": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1",
      "version": "6.2.7-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-orm",
            "purl": "pkg:maven/org.springframework/spring-orm@6.2.7",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.7"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4fb6245a-e145-5ffc-a06b-241295d3c343",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:10d6b703-6b12-5605-9b00-cfbddbf3eb55",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d148fe40-022c-521c-8b4e-8c3b9243932d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b468064d-9804-5d49-b5b1-6b376aa7d923",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2f2b3049-d6b3-5230-b75e-d141a9ebfb69",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:049ac2db-bf2f-5b87-8e8d-06dd78773362",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d2c110ba-8f23-5bd3-9edc-886ef5fe873e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2c5a699e-2d39-501a-b331-88593582468a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3b590b13-994c-5e9f-912e-d0f66ae49b5a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5a3bbb2e-ea83-5285-8720-5f9a265e4bcc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6c93c1f9-fcc3-5010-b3a8-a38194ad3885",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8a664ff6-2761-5c26-b3cd-72b27ecb3dc4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2b29fb21-0b88-5a9f-8ee4-6a8189edac83",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2d6a67ef-5b5a-527f-ac1a-9eeaf3b6c79e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f14ff4dc-506f-5acc-8da8-f8d1375c7e92",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1dd049c1-1437-571f-bbb5-811ac7604c65",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8349ee57-765e-5310-b8ab-bb8e041eba72",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aa7b4e20-8a95-5cf8-853d-afe705107e53",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2b867cf8-6a46-5b92-9352-59b5161ec553",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:41048409-4716-5419-a2f2-71d6ae3d676f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e227fd18-0453-5cef-b04f-dd3aeba1cd2f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b8a46c20-29f3-57e3-bb6a-48b6a71c782a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:23b0d60d-cee1-5d24-a7ed-252d28b4d0c4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:59c20d8d-110f-51ba-ad19-a0a7c8eb2df3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:20cf2ca7-38a0-5238-bcf2-fb91223db2cc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e3c93c15-d98c-59c6-8614-361dc4e6592a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:034607a2-f7ae-5014-a9c9-5949da9c4793",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a81ba6a0-d111-517b-a828-78d33fc1ff21",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2fbc65bb-aca5-5d30-bf63-5b377b12cdcc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e2d23ed2-3067-502f-a2b9-2366d0a4f2d4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c1c1a671-ad8a-5de7-aa72-b195af1c0ad5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:163c2d9c-fb88-5d2b-bd0c-df3764319a5c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ed660f24-bbb1-5988-9a5d-9be387adfc0d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47890 affects version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1f2d0c83-cb6d-53fa-94d9-72f1c682aeb2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fffbad81-04fe-50fa-8258-32d207cc8fa6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e5af86c0-8350-5d78-a7d5-b2d581bd2b7e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3ce2f2d8-4525-530b-b8ed-385f431c00e4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:775a56ea-082f-537c-bbd7-82404fa18e3d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fde72f6f-ed2f-5130-a08a-42bd7e581b66",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e51fc16d-3d6e-56e8-9677-4bfe6be2b351",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3b7aa29a-a175-54d6-abc5-1fa1385dfa9e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c0eed901-ca93-5d5c-a05a-c7e221e2ed04",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-orm."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.2.7-tuxcare.1"
    }
  ]
}