{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:83c67dc6-fd56-58e3-88be-c5440a256e00",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-instrument",
      "version": "6.0.0-tuxcare.1",
      "purl": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:5a270da0-744b-5d67-b1b4-f957df2e8acc",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edfec566-d2da-54c6-9746-ccf593bfda94",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3814dd88-a42d-5d72-acf1-e6ddefdd2879",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c587cb3-1e72-5dc7-ad70-5f94ef00384b",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1b3d2d3-1704-5a2d-824e-80d5172317f7",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:569bb969-216e-505b-a59c-710a74707b65",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8df377f3-3e85-5f09-9e51-43326d2d04d3",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:615bd6f2-5592-5aad-b276-0e4b56f6784d",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1104f3d-e190-5d2d-964e-59a51d0cf52b",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f81e65c8-c2dc-5e6f-ae1a-3355b6ee09b3",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97395679-894a-5236-8338-7f7fc18c313e",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a09894c-4029-5aba-92cc-aea66625580d",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29c5a3dd-1371-5bfe-9cfd-67f5a3955385",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8368f36-6867-57a6-932e-f7ff9119375f",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62452c5e-9416-54bf-a723-3c29c79a2850",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26d1cedf-bf6e-5068-9204-b20e2d5f00a4",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6add94a0-9eee-5252-a0bc-595f5fb6a208",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c24b3ac0-f1c8-5cc7-9796-06002412ba28",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92a9aeb6-8043-5aff-9a29-1ef603bcf505",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:844ef7b5-57e4-531c-a7b3-d52ad8b477df",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df053406-826e-5fce-86f2-7b72060bcc98",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:782df22e-8493-5fab-93d8-5a4061ac045f",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4770a6df-8727-59d9-ad5f-b33a75eb8c45",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7efa3096-cb6f-574b-a305-f1f83f47b390",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:007e592f-4fe6-556e-8b6d-c9e564f36e64",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2b6ffc5-62e4-5327-b153-28381062dac0",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53390a72-2a4f-58c5-99ec-073eb929cf41",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a33076ab-b953-5d40-9072-84f0ec32d765",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85a153fe-be75-5096-b400-b4c777ea7e27",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dfffc854-9aa1-55c6-8ce5-704b07ccb9bb",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:578e5cd9-7e7c-515a-886f-654195792da8",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:663043b8-7a83-5902-bbed-39b55dcc0ed1",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9b6b10d-fd92-5006-aae2-ff6d43fc236b",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d89ec804-113f-585f-a328-5ea1e8cc7984",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a039bbed-bdd1-5a6d-853b-4c5ed158b0ef",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:baf7229d-9ed2-580c-885b-d496739ecd1d",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:badbc027-a921-50f8-8c9b-a472c9ce45b4",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73144c1b-247a-563c-a410-4dbfc8813cda",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95717c49-9629-5808-baf6-bd13c2c971e1",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98f57190-323d-59a0-a792-dfc8e0ddc058",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a41d2909-a444-5fa2-ab3e-1d5e66e6ea41",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:423c6f40-68d8-5efa-a0c7-b43402bc6de5",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df729c5f-0c17-5125-afca-47117f6c2186",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ff8f0d3-6ba9-54e3-8957-e6214aad1550",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bac9ba26-3d39-5dfc-b0e9-84982ca43c81",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:288d2250-6de6-54ac-b953-a71f5cee3a38",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef01837f-9069-5861-a3ea-59fe3039f6ec",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:668a36a7-8e50-5bba-9b4f-b44ac498af57",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.1"
    }
  ]
}