{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:22e625e1-5900-56ae-b82d-472ee4e4448e",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-r2dbc",
      "purl": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3",
      "version": "6.2.3-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-r2dbc",
            "purl": "pkg:maven/org.springframework/spring-r2dbc@6.2.3",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.3"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9f4e0d70-0ed9-5731-833c-3bda7f4fa7b8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:779099c9-f72d-5848-a05c-a5105c2d8877",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41234 affects version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:bd46732f-c846-5c25-b0db-09bb1d0ea985",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:152a6d65-c9a3-507f-b417-725e7dc4591e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:64453094-d70b-532c-8e62-5357adc630de",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:be676764-9bf8-5fac-b5ff-fbb30bc81117",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0df2be78-1703-5a03-b3aa-5c64be246bc7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5463961f-3c32-51ac-966e-94f3de11a190",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f9f69d64-6b1f-5601-80c7-959a5b6a023d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:074556d0-4b3c-5772-9869-5db589f037ea",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6ff29c40-fec3-52ce-b854-626eb7434b43",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ce93f9f2-0794-520b-943a-7102a994026d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:90f9b5b0-a722-5c08-86ab-2c139fda2041",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f5de4e44-dfec-5a0a-b678-397c8703da06",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f85fcbeb-b9dc-5590-9394-460229f71af6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2e9c9427-58d3-5930-9f78-4926f308078a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:45c60ad0-5b04-50eb-8b86-552933efc356",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:daa302eb-f73c-595d-a6af-0302d25c07ab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f9b756db-df7b-5be3-89b7-b16d6dd64da3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5cfb7e8c-c7bb-57df-bae9-c1e873e1c1be",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7c493aa1-0d4f-55f8-b357-9be717649410",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:22a20f32-978a-5339-a472-519287f5551a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2876fdcf-b27d-58c4-943c-d2f6a0715099",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d738d38a-8da3-54da-98d6-7196639dd985",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2ecef221-fa9c-5d4b-a48d-83c6df6d68e4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:66c9afed-d72b-5e97-aa2d-1e6322c3c4be",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:954d1ac6-3eae-5f07-bb61-f277fe1cd5d2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:82b8bd00-c756-5d0b-9c9a-543027d4bf18",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f9614d10-d52b-5122-87fd-2b41c797cd1e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:54ab2f0f-c2cc-5547-971a-591de51bd2cd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:85eaf003-b96f-5dd0-adf5-9853d1d669ed",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c052e6d8-487f-5771-a7af-3847c29b212b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8fa2790b-47ca-5081-987b-60a529e58948",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:403f79fd-b173-5eb1-b21c-a3ed8d4c540e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:426c15eb-6451-5b40-a9e7-b7341b7ee2b3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:51e6ae18-6348-5db6-8dd6-31ff44191bf3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3dad1eb3-9508-52e6-827c-47a90f9142b8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e58009dc-8084-56f2-814b-d0752313b22a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f9a0f3b7-5930-508c-b392-8cd26e255535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7548d297-cdc6-5516-b535-63a2ebaaf50b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:890a8065-e4c4-5343-94de-387ab99dd25f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d299e321-31ac-50db-8047-10bde7396694",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0beb88d8-3f4a-567c-80f8-4ad8913781df",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.3-tuxcare.3"
    }
  ]
}