{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c64fe34f-07a7-54cd-bd3b-ef941a2b175e",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-webflux",
      "purl": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3",
      "version": "6.2.3-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-webflux",
            "purl": "pkg:maven/org.springframework/spring-webflux@6.2.3",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.3"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:44677362-76ec-521a-aeda-75759db08ca1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f3376e95-d503-5bee-a78a-75f18ee9c81f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41234 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7862b987-ad89-5b52-b25b-0310a06a63da",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:26765ad1-6448-5028-bee2-df7d78664f9c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6de0e330-15b2-54cd-add1-0e8ebbde1f4a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:288cbe11-2519-5f49-92d3-712a7d30a77d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:bc04f52b-2667-543e-a5bb-48151beed2ab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:580d170d-c2e5-565f-aaa0-f4578fbb2dc1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6f8064fd-6238-5f8b-94b0-87c0021056be",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:454577d9-fe28-5f54-bbfa-6106ac48885c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3ddeda00-c408-5de4-b7e0-53fb815cf121",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9d1b9bf1-6a3d-5b61-afe4-9e1a64851923",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:20ca3e0e-f3ae-5f13-9b71-949f331b9b96",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7ab5ad23-81a8-5959-8b2d-389043b92a89",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:53e80a7a-fd46-5d5b-991a-a94101253687",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:402bfd1a-ddfd-5dde-8d35-e498dbc6bede",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f276abb2-cbd8-53ae-b892-07af66817c56",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9f4a5c35-e550-5f92-8d75-6e846249f078",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:63f69adf-ae98-5f0a-bd7e-ca7870e2e838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:14b42c11-d70b-59df-adac-36b5e8ee4bb7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:88b5b10a-578d-5f92-bffb-a00ce2edca42",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:63ee7f42-ba65-5b70-bc66-b17f85680f56",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:68cd0172-da53-59e0-80dc-e28397cdaa17",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e606ea32-6e19-5ac5-9dad-578a061896fd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:966af675-5800-510d-823d-70e53fed4802",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:feb02ad8-d751-561c-84ad-e8f9facd0c8c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ebb00eb7-9330-5989-af40-ecd3cd221323",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1fe9d258-80fa-5099-ba78-e5b484e72919",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0d42ed92-4654-5320-846e-cc4c902cc074",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4de70fc7-9124-5f53-81a5-a4d8f6c235d4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:810106e9-dff6-5bdf-b42e-90a923a0b93f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:cc7f85b3-1314-545a-89aa-d9355805dd7c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f650d2cb-afb4-5cdc-b370-e3946ca93dc7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5607a465-30ac-5e42-a62b-10d7e25c2e84",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:fa1d31af-f389-5f05-9ce4-9de5bae28ce2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6ab970b5-ebb6-5622-aa54-e0e76a438c38",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:30bfc9cf-4e26-59f0-936b-da7f857ad0c9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:558d98ac-6f3e-563c-b2af-b2f16ec13797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:dcbbbb1e-fc45-5bee-9651-69dc3c9d229a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:06f6f32c-a807-5b86-a3d6-4d27f48fed2b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:772281c5-bcbf-5d2d-9a2e-0a9b501a1e24",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:dc71d815-b87d-5b8a-9130-1fc41eee0358",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:dd7dae56-d7cd-5594-a197-2931acfef4d8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webflux."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-webflux@6.2.3-tuxcare.3"
    }
  ]
}