{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f6297650-7d3c-5be6-b8c4-510d13e14663",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-instrument",
      "version": "6.0.0-tuxcare.2",
      "purl": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:b3b31ea5-6fde-5da8-a8c8-ce40d9e713fa",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a553eb8-1e4e-51a0-8ec7-9791b71bc75c",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e69848a-9ab8-5774-b47d-35cd94a9bab1",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:996543d9-96d0-5d79-8ecd-94dd70740f25",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4edc6604-a707-5879-a665-a8ed7884c56d",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89287ea2-e43b-567d-a76d-74110685a001",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9e87e36-bb65-5800-8793-906d781c0226",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0eee09ed-b7d3-5b98-80b6-5adec22995c2",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0521c299-8762-546d-98dd-101d4843ee57",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4befefa7-4b76-5604-83b7-6fbee15c89ac",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ec4be4a-45fb-5d6b-81c2-f48d5ec60de2",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81708f89-7c8b-5d19-a0de-f6fe56d9396e",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b9a0858-b528-5100-bb45-891fae60f97f",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbbf5fde-bf87-5350-b2d1-9b86dc83b2a5",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1504d744-a917-52b9-9cbc-66bf33895036",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df1dafc2-6b93-5594-aa0a-8c676c66b474",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe598223-28d9-5926-985e-14f25581c853",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d13d348-fdc0-5184-913d-6990ff03d18e",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89f592c4-4f5b-5f08-9f8b-e251ef2ae81f",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ef80efe-26fb-50a6-9328-464e5dfa37e1",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a455a67-413c-586f-80ab-09df260f0138",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7f6c831-7db2-56ba-a9ca-e98bcc4e8837",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c773f216-270f-54ba-a100-1795074cb300",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2e6ec54-4d66-5e22-8c3c-36cad0845fa8",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9330f2cc-b60e-556b-bb94-911373d638ad",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2de7cafb-1e5f-5571-905a-c1c27a703115",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13852ec3-c565-5ac5-bf30-0534e6f658fd",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:233f5ca2-f923-53b2-955e-921e82bf9f47",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bb2e734-2874-5b4d-994d-8b910d1efcc2",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2593174d-209c-5a15-a89c-6f69585a60ab",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa81d15d-13cb-506a-b4dc-f719d3b97e20",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:401bb6ff-7086-5ad1-96f8-d70ca09c0a09",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b2f9b0f-8bbd-548c-81f8-2ef5dab30fcf",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7ce83f4-db09-52b0-84e1-b034f7b86c88",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:074c6ae3-7ce6-529a-b910-e20a25e67244",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b47c150e-da11-54c7-9b08-b210c439f2c3",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ae43fb4-aea6-5ebd-8e5e-76a709b2ebf1",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca9386d7-1c35-56b5-ab13-3c784b01a1d3",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54ad2dca-4cd8-5cf8-a830-380129204ce2",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3801a633-64ac-5691-905f-516c85ec0d8e",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5befb0b1-77a0-5f19-af77-e2ee26e1864c",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a71a3e9f-d5b3-575e-91ac-2dc0cbe46789",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c01403e4-99ea-532d-8fbc-f006b8e5bd03",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:098f07e6-a746-5acf-9a91-bab7c7a586d6",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24527877-eae7-5831-ab01-d0ab729e9ca4",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1965cbbd-a10b-5fe7-b71b-c144b2a38537",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:552b7117-b1d7-5583-8276-48b4e2df66e6",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c132a0ef-0946-5a77-9dce-38d5299b062e",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-instrument@6.0.0-tuxcare.2"
    }
  ]
}