{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:846a1ac2-d0ed-5adc-ba0b-65eb85b27eb2",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-security-oauth2-resource-server",
      "purl": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1",
      "type": "library",
      "group": "org.springframework.security",
      "bom-ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1",
      "version": "5.6.3-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-security-oauth2-resource-server",
            "purl": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3",
            "type": "library",
            "group": "org.springframework.security",
            "version": "5.6.3"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2010-3700",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4a4ca5c3-2e3e-50a3-a110-109eeff096c1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2010-3700 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2011-2731",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:73998607-862a-5007-85c7-e75fcbb42f4e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2731 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2011-2732",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e4234706-b584-5bbb-9cb0-74ca23d77081",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2732 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b8267ce9-6539-520a-b518-fdd7e4e3ad6c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2012-5055",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a27387f8-0bde-59d1-8849-d4716dfd7d60",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2012-5055 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2014-0097",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cac95921-6185-596f-8624-b74144b367ab",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0097 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2014-3527",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:43360cd0-c584-5485-b2d6-2185b8af6f5e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3527 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d9aeac9a-3a44-5220-9452-002b2becc7aa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2016-9879",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9aa3b3bc-516e-51df-a565-82497f53df9d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-9879 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2017-4995",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f0a8869a-58cd-51fe-a0d5-f5a7ff9f3b49",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-4995 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5b28206b-5fd0-5e95-adaa-a932bd74a4c3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2018-15801",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0e0a1162-6b6b-5970-aa00-b0052cb91ee0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15801 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2019-11272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6a4e075e-c7a2-5172-9255-dfd12405e400",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-11272 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2019-3795",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5bc269a6-c3f3-57c9-bbe4-be0b6c9bc2d0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-3795 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2020-5407",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:acf22769-3e03-5e27-aed3-c71bb9974b50",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-5407 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2020-5408",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f72fa839-cbc9-5838-9676-48781f49268b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-5408 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2021-22112",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4bf0c1d4-df04-50c4-8f7a-39a0a2b9c99e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22112 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2021-22119",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a25ddf0b-aabd-5906-b351-6b1c4d166692",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22119 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2022-22976",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a278ac53-f41e-542b-a313-f55e4cd9256a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22976 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2022-22978",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cdc382b6-922b-5d47-9c1f-1a4cf177d275",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22978 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2022-31692",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:48ac2760-b94f-5f0f-be11-cd7f21a7e7f7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-31692 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2023-20862",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f5bba335-8c83-5ab0-8406-3be0a0125447",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20862 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2024-22234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3a284489-60a8-5f70-8798-da1e28077ab1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22234 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2024-22257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8c1ac12b-1a72-5dba-bd67-dfbb62ab4ab2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22257 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2024-38810",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3c072ad3-f61d-5370-8332-f7212725c566",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38810 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2024-38821",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:23a9c067-07c3-5c59-b100-9705afa48a3a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38821 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2024-38827",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d77b313d-3c07-51ec-bd53-8fd0b5da3674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38827 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2025-22223",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d1aee7e1-95af-5355-9839-ff2dcc094dcb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22223 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2025-22228",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bef00aaa-f31b-516f-925e-d4ff9af8c816",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22228 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2025-22234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:92985839-86d8-5c4e-989f-06976f3e4572",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22234 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2025-41232",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f3702477-adf5-511e-ae3e-00731988e580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41232 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2025-41248",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:56dc18e8-3b91-5262-a433-6bd935ddf6b8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41248 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2026-22732",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:22d3cebb-08fa-5606-ac39-0aebdb44ab69",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22732 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2026-22746",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:730ad845-9c7d-5e27-bd66-b69370c01192",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22746 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2026-22747",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:37a0e591-33ef-5caf-a7ab-0b52a06c8be0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22747 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2026-22751",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6a27f6c0-b8ed-5efb-a8aa-f77244fd31f8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22751 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2026-22754",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ccad6772-e5e3-5fbe-9deb-5784e1eceef1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22754 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2026-41706",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fa8c3229-118a-50d6-8c97-836acf2c05be",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41706 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2026-47838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3c8c3f2f-6a32-5d0f-8922-baa416909319",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47838 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2026-47841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6a995b2f-a362-530f-9742-bbbb6417342f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47841 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2026-47842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f68875ae-6b96-585b-9b4d-c4506e100a70",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47842 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2026-59276",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ccbfab0c-91f0-54ec-b736-66237f207bca",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59276 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    },
    {
      "id": "CVE-2026-59277",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:131c4981-0305-5091-ae44-e5e789573f21",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59277 affects version 5.6.3-tuxcare.1 of org.springframework.security:spring-security-oauth2-resource-server."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.6.3-tuxcare.1"
    }
  ]
}