{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7ba1e66d-c380-5963-945a-35b2aa1f4d76",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-r2dbc",
      "purl": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3",
      "version": "6.2.5-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-r2dbc",
            "purl": "pkg:maven/org.springframework/spring-r2dbc@6.2.5",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.5"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b1760c18-315c-595e-aad6-217125153016",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:af7df2ee-e0d4-59c5-ade2-3d22a9838e86",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3e3d2993-c566-5bee-bb6d-8ac8e22ced32",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:dbd3a177-b025-56bf-9942-e8004587e876",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:565ab196-74fe-5e28-8653-646ec8fd9b5b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:002ff92c-602b-570c-9029-0545bfb37972",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5146e632-1a59-54dd-83cf-d37f83a355ca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:80594189-2870-5eba-9872-24a134860787",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:65c3ea2c-5a59-582d-a4e5-51770abba72a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7e5389e7-5b52-51e4-9c0a-05c52c55e2e7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d8ad1f52-c86d-5ed3-b552-1851ca7b0748",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9976c39a-1bbe-5a88-aec0-6fe0ee9a395a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:09cbc7f6-2d62-5351-9874-f77d7b5f20fb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:aabe61b9-005b-55a7-a96e-1bfe2c1aa4c3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f2d60927-57d1-5550-9abf-eef10cd3ba9e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5de911bd-9a9f-5a0c-9734-7231fa4aba33",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1e21d572-7825-5ed9-9ce2-2adc4438fa75",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:841165b3-a419-5c29-9ccb-ab7a2bdfee32",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:352d9999-4dea-5126-8bed-f364eb5230a4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:92f740a3-3188-5324-87ad-d27e1aa0c3ff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9a711956-9a94-5f81-9141-4d1d95112dd8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:812aeaa8-3a64-5b30-b0fb-4bfd3103e30a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:85070f1d-70e6-58ce-952c-d9eba43982ee",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:36d6b40b-b7f3-5c6a-845a-942f07a00dba",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:201107ac-748c-5827-8733-b03f60234713",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:492b5166-9cfa-5123-89da-40b29b851ba4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7ec7bab3-1c7f-5917-87d6-3c1658873366",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ecced033-24c9-5f90-a9a7-8acf465e83ab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9159de46-5eba-5d10-a779-e6386a472d24",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c1a6833f-66a3-5ffe-bd21-ad06a0a5353b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d066dd57-cb36-5079-a3e3-b0965ff80741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b0f7e463-2aa1-5dc4-a3ac-e06186c01c65",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4fd2e36f-4530-5339-a443-cebd6c7872dd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:adfcac5d-c828-59af-822a-4b29cd4db504",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:acb81a00-5758-506e-966d-5916f019814d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:84f24746-1f0f-5992-a362-9d074433605b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:026383ad-b9db-5de4-b081-4090995c381b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:373d646c-3a0b-50d9-9380-54b5e5909d00",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3c1af2a5-b181-5e1c-bda5-a39316a7f8bf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:003f8687-b9ae-5902-be8e-9be9fcb1eb48",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7c3c7261-bc1a-5a9b-aced-5806a55f86ff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:68a7fb9c-52db-5644-953b-09c04c016e65",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:79299941-5dd1-5485-80b0-8636075bcbb2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-r2dbc."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-r2dbc@6.2.5-tuxcare.3"
    }
  ]
}