{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:fb59bbc4-4923-59bc-b940-dcfdb56a6750",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-webflux",
      "purl": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4",
      "version": "6.2.13-tuxcare.4",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-webflux",
            "purl": "pkg:maven/org.springframework/spring-webflux@6.2.13",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.13"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:b25ba5d9-224f-5ee8-9f61-4ba1d3c5a1fa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:bd0628d3-c6c4-5361-9f25-20ffd1b4127e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:9d9b7dd1-027d-50b8-a146-b88257824245",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1d107a57-810e-5da7-b9f0-b9785a8f9a29",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:c6b19d4e-9cf9-5251-a8f6-5b4347d78536",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:65ee4857-b431-5b90-9176-48acd644e0e9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:5ac965a3-2fb1-54d0-8b6c-e36653afd9f8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:b372ca56-0d94-5ba6-88a8-6ba643fd8692",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:3497743c-6b49-5de1-91b4-018c7a45f78e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:b2309742-6475-5501-a1f3-38bc5dcfda32",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:0aa0fd87-e0e9-5920-bdd3-a414e2f79c02",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:b7f98d52-e062-5bb8-b5d9-589d8c344097",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:cf948707-2c06-5770-b6d5-b8e633c0556f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:c00f8a86-2fe0-5f12-90aa-e66976b34630",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:149b216c-441e-5a00-8faf-108be6a1e180",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:2e021c44-0bba-5f9d-b770-e97f4aedd6c1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:bdfe4ad6-e371-5b28-869d-434a2f4d73b6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d0c5d905-8bf4-54fe-9834-88c43397cb42",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:40e35c33-0d6f-52a4-a2e6-630233226070",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d5994b92-c1fb-54da-940e-62f74e9c392a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:a6eb012f-541a-5c47-b68a-d65d8fff18aa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1550e658-67d4-53c0-92e6-f014b2d6e252",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:631978d8-88bb-571c-9b14-5abc8dbbd761",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f130df6b-6eb2-5e7d-a804-3001b86e3acf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e8c0ac5d-1873-577c-8f71-afb02d4038c5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:8241f2db-d5e7-5d32-82ad-694910d2d688",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:864c3572-cab1-5208-bd5e-ac18b2adc252",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f9249632-90f6-5d47-b035-43f116e794c3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:76211aae-9e65-5c78-82a8-d6d3007bdc1f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e1767faa-d25e-551d-9892-40968b0b8c58",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:18469aef-7ec0-5130-8213-3d1fd5e5ee2a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:36bc50e7-1e95-58b3-b206-006084f6bdf8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:a78ff3ab-e9ab-57b6-bdd7-897c02688a94",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:2883aac5-bd8d-5cc8-8aca-23cd653726b3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7f8463da-2dcd-5e6f-9f58-0e25277d7a9e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:c5bf8d1a-01c0-5ee5-86e2-d848aa480a6f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:6f18c00e-6d53-58b4-b8a1-c8080b7a9525",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:b7d168f6-2652-5190-9013-5e0aa0535f1f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-webflux."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-webflux@6.2.13-tuxcare.4"
    }
  ]
}