{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:66b144c3-16c0-5f33-8422-e41c3756b989",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-web",
      "version": "6.0.23-tuxcare.1",
      "purl": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:688d0e96-c7b1-55c1-a981-7103f23bdaad",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38816 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c70d8ca7-de63-54e0-8801-de0a3134adc5",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:241d6cd7-c6b2-5905-b7a2-7395630b54b6",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a87078ee-ad43-5d27-b956-8209d567e2d5",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fdb15c3-87ce-5ddb-a356-bd2f8215430b",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa67a4bb-1a13-5865-b133-4347138c728a",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f0400c0-dc3c-5f15-a61b-1222226299d8",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd46e09a-59e4-51a4-a2cb-5c83c7c6855c",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e535eb4d-17f4-5029-8c8b-23cedf32ea8b",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:905346ea-1902-5aeb-a6cc-251c5472b7b7",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3341c36a-e300-52e9-ae38-40d5fe7df9db",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:546b23d6-6ec5-50b0-bab3-fb6a0d7b8e07",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22741 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95bc722b-c0b3-58df-980f-bf0e2e579b1e",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22745 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:224d72ea-5092-5d2f-abb3-f6036c958b68",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a59c950-c7f9-57b4-bd2a-6f8b512d0448",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68d4d8ee-565e-54c7-88a4-10081d343761",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5e36171-10e2-517b-8562-0618180c6332",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ef0eaf6-debf-58ee-86bd-7c94f928b17b",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dec4786d-6d88-5ee2-83a8-c3219b74e822",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9b1a927-6699-5d65-ab96-bc69e8117695",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41844 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:152ce754-e949-5fcc-a89d-e2ef1438ae8a",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41845 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6dd00dd3-0f3d-57a5-b942-444196c54089",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d4a5636-1c13-5d18-a798-315a53491c4d",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74f1864c-896a-5b23-b76c-f1bd9829e253",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca20d809-7ed3-517a-889d-d0f55cf0c29e",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87a29278-1708-513c-ab2c-77360bca5c23",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e726692-ee70-5803-a895-e6f36f83fe86",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc2b0e20-f0a7-5587-956a-4721c5a0f9c7",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3b377ec-2712-5fba-acf7-3e3ebff5a649",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe126557-8007-5a70-b4a0-9d50d5c164c1",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cbeb231-0f6a-580d-8f2a-55c83225601d",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79f11ab7-5e58-5d62-82f2-580170f054fb",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8e552c0-c638-5fad-bc5c-63e992e9913c",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f15c781-fcb6-5459-a72c-aa808bb2a758",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ade360f-36b7-5779-b2f4-a5a323521c33",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa34fa8f-ca6e-592a-b80d-0dadda267244",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa4cdd96-4f2f-5c8c-b710-3a041e403bce",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0c211fb-0135-5a79-b1f8-b9abc6a6b1e9",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26363472-5320-5f62-a118-9c607e48ccba",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1aa2247-1afb-557a-9345-a5bcf51d00f7",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56687273-06c8-55d3-81c6-817ffd570c56",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
    }
  ]
}