{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:31c87b82-90c9-5f7b-adee-861fd609449f",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-oxm",
      "purl": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3",
      "version": "6.2.5-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-oxm",
            "purl": "pkg:maven/org.springframework/spring-oxm@6.2.5",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.5"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ef2d598d-e5b7-5eee-a36b-72b478d8b142",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d489a654-90ab-5678-8a85-1722764e7a48",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ce611d7e-93f9-5a3a-8846-819603ad8dd0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:cfcacb53-3a41-58b7-a659-6d6b02713872",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:29531e4e-57d3-5712-aac4-03f62176bcdd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7fb84548-76ca-5c4e-a5fc-9025edef752e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5e32df13-da39-568f-9b62-c10c53ea3e7e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ba978848-7053-5579-b738-64f4704beb18",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:984b31d6-1be5-5b88-b13d-d8808369c3b1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6cdf2391-42c3-5e3f-9a67-f210785d8d20",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a610983a-dd39-5a66-8b96-28e966767192",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5f13d817-cc88-5f01-9d4f-7f147bdb303f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a3c6ac9c-b08e-5e91-96e8-d42e6c867b65",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d39fca80-0c93-5ddf-a377-ce3fd88c990d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:60f01c10-d3e9-54e5-94b0-e29090eeffbe",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f5841046-c5b9-5948-9381-c6c75be972f9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:341707c3-dc60-5ce3-b89f-28f18dd2d89f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:dd46de91-134e-527f-8454-303842bab2fe",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a28b1c94-29f9-5bc2-97da-4d5059941fe3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3b8fa520-4fe9-5625-8d2b-d5799e60e27f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4b67d497-1b5d-5256-a616-0e3d135f3c10",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:467b7a01-2485-5389-8037-3e6cd5c388da",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c3ecb964-e25b-5268-a256-81829042e4ae",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:05a1a86b-ab8e-573f-966c-06d0eece14c4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5ac6d800-bec2-57b4-b0e7-615c8f8d47a3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b4c3f12b-bba3-52da-a556-25d10a1958d9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0cd2ad3f-ca5b-5ac9-b1ba-2b1a614aa49d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:65ec7ae8-0233-56a9-ab29-6d31d491499b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:48d16ab2-549e-5854-9d0b-dae707a8a51a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:72c9bdfd-6265-5bf3-b8ce-66523a159677",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5011d5cb-4cd6-58e1-a522-8ba7fe06887c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3226e741-9b7d-55f3-a136-0479a2bfbca3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a1ea4f28-9c31-53be-a4ad-cd89f0b296f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b4b7774c-3882-5731-b011-383813db7a20",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2bb56b4a-454f-5797-b9a9-0f1ac00aa986",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:bb25d7bc-c4ba-5752-ba17-8ab285f16d00",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:cf4d9748-600e-54d5-b0ae-4954ed3a7f41",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6e8dc973-d78c-56f0-b06e-1051f5c2b9d7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a575c847-2ddc-5e8d-bdfc-7f906eb5d7e9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:27ca03c8-dc39-5f60-81d9-f0e740ca007a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:327bee9d-c321-535d-ba46-b91f7aeb7f96",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:99d83671-f082-5cdd-8c09-c2fac8951b73",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3fd9d9e6-8174-59fd-9587-10e39c158a6b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-oxm."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-oxm@6.2.5-tuxcare.3"
    }
  ]
}