{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:84701074-c793-5520-8da6-dfa97776c22f",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-r2dbc",
      "version": "5.3.39-tuxcare.20",
      "purl": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:9afcec75-dc5a-5d8b-acf5-61928e7e956e",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3217a157-79a0-5b26-8ae5-2d72adf5cff2",
      "id": "CVE-2022-22968",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2022-22968 does not affect version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02a4d201-278c-5418-be1e-be9c1ee48f37",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6de3cdf-07cd-5f23-9b10-d85995184de8",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5eaed62-2fdd-57ba-bb40-af48e126f9d6",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:819da154-e3ab-5522-85ec-720b65dae2db",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e709fc3-46e9-5add-9490-704ba51b1258",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf31ff40-12e8-5fac-af1e-ef3175a6e5d9",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-r2dbc 5.3.39-tuxcare.20."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:005ec32a-ebeb-520a-8063-20cd50b7a92a",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab0f5e7a-a05a-563e-9e84-a4d21498d896",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:452bcd7f-304b-50c7-8028-952bff11622b",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19d6959c-58aa-5e7e-94a9-9192f7ed2739",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:323a6d46-3b00-58c0-a13d-5b0de08f66a3",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60e4a237-790a-57d6-aa7d-25f101d43dff",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d7c99f9-42c8-5391-b448-e065c898492f",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ad85a81-d48b-561f-8d10-e36409077504",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:923d10f3-2121-56a8-84a9-4c349635b074",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4e1ba44-2ee4-51e5-afe0-1b9d00a01d8d",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b7047f7-58de-5afd-8906-fde63021da8b",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75a2a3a9-4951-54fe-a3a0-445f2b820bd7",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25512fed-5168-53b9-9eff-54341c822351",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e32b12d-3a06-5345-b354-039842cab446",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5a8a277-84ce-52ac-9316-613f9b7d810d",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d91863c7-4d58-5c87-aa3c-3bbe7fb4686d",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d07c34f7-d13e-5c5b-929d-f85bad21618b",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6219c04f-75c5-557b-971e-494d8c3b1b87",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b574a4b-968d-5bcd-98d9-93ab167f25cd",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4afdbcc6-7f5d-56c5-b019-474b600a47c8",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d929f79-3444-5a1e-9945-d21abb95fe6a",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05581326-dbd3-5b7d-a744-1b42b40dcb9f",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e6d5b04-64fa-5538-b469-a7a7909f18e8",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:299c320e-3236-54c8-a62a-9b7678274343",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5117fa60-1a75-58a4-a234-e530cf484c43",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5851255a-e302-5974-9152-53bad2f352aa",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0196517d-e764-5103-a95f-f1da8f2465f5",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c87c9d83-9ba0-573f-86cb-f274df2690ff",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:731798d3-432e-5e3b-9738-88294c07e854",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2da77ca0-9e22-55e2-b171-bc3130bec8fa",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20f95905-c4d0-502b-86b7-750331222b66",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9cfe8c7a-21c1-54ac-9a21-13eb86ff9c6a",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afe46343-7707-59e5-a728-05438cba36eb",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be00d873-12ef-5257-93bd-370eff3915f0",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:456dedd3-147f-5ea3-9d7a-534f33b59120",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d769777-6a8c-5b8f-a1c9-a2c390da0b37",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e630b4d-2e8d-541b-b62f-a4ca17f62daf",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ebbcb41-6f1b-57ab-8daa-21225ab96175",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:802c4ccb-f4da-50ab-833e-3418c21b1251",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.39-tuxcare.20 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.39-tuxcare.20"
    }
  ]
}