{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b10d986e-a73f-539a-b641-3121fe9f55a9",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-instrument",
      "version": "6.0.12-tuxcare.2",
      "purl": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:aa2cf699-077b-5527-a875-2eab4f6a38fd",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d2a9a12-3556-56e2-bc2c-47aabc7e24db",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d44a373a-a959-5fb6-8731-871256fb0506",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4ca6917-e86d-5159-a36a-26605653fd8f",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96b708a2-9a7b-5d88-aa40-3546d8a2ab68",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60edede9-1be5-5a95-af6c-97f12d4f0b6d",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6ab19bb-45ca-5fa8-8757-351f1f72ed36",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8898c8ee-76b2-549f-a37b-a6a04e9b3a4d",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50f3a8a7-7145-59ad-b3ec-ab4962d85835",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ea19cfb-10cd-5c2c-bc2e-3bac6eb3b873",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43cb6b58-9693-593a-8dad-4b7101e21aa3",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e716185d-7402-5f00-9911-985a5c01a251",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f52a8835-30c0-5d1c-9aae-057744dd3a87",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:191692c7-e642-5094-bce9-d41c1c7aa1e0",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3578007-1783-58d4-97b3-178529b19b20",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d63b62bd-3787-5537-a1aa-8c3242b2e29a",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c9f456d-867d-5ec8-8af6-3c6899dd53a8",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4df63417-d7ca-51b3-b57e-c351c09d1bb3",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56b206ef-85d7-56be-82cc-b303bfa8048a",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37dc3c6a-8002-5b5a-8a8c-7d0e20f2aeab",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41839 does not affect version 6.0.12-tuxcare.2 of org.springframework:spring-instrument. Current version of spring-framework is not affected by CVE-2026-41839 according to the vendor - https://spring.io/security/cve-2026-41839"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72746a58-8c91-5b7a-9599-e956ced1125e",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:181e5602-3951-5535-abfe-f0ee3eef3c27",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23e2db4f-5b62-54b0-b5ce-cb0543b1ccdc",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:275c1eae-f5e1-56c1-9130-b171cce8c8fe",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a179aacc-f64e-5916-beec-ed46745421e0",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3bd4c17-520a-528b-8d43-d1cffebaf49b",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b09cf0c-8c07-57cf-8258-62b78bbc7773",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86bd228c-a40e-550a-8e99-5cd2e3e2d5b8",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a02bcc9e-010c-5396-a56f-ae8db8cec511",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:daeff3a6-a2a2-5d7b-b68f-280bd79d097f",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16ecf056-6926-54ba-82a2-c158c5a3acf2",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5533c895-be17-58df-9489-ab8d9a85c323",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e70cfa4-02ab-51d3-bc02-8a2e2b9f743b",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4386cfaf-4686-505a-b800-0e8ac323237b",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42d6cf6a-dd25-57a1-9c5d-ec066590a29e",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f56d47d-10ba-52bc-a7ef-f99780d8ef40",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66731ca0-fbb5-50c4-a40e-c94894c3ad2f",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf46145e-910c-5e9e-9f6d-ebb1ab43762e",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:beeec66a-e7ba-5541-bdf7-c6fb4818e9c5",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e4c764e-e014-56b2-82c6-4259a1f0fe79",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f25a96a-781d-5718-b5d9-34e7cc2af1e6",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08f86ff3-f25e-54c9-9951-7c6605e0885a",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:459a1908-ec80-5cab-884f-48ad2d659a8c",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6370e2ba-2c99-53a8-b856-a8b4842153d2",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c7b8e97-2883-5145-bf86-d66c67fb80f7",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:817cd027-a57a-50e6-adf6-999536fb36ce",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75704f4f-cdfa-5a10-be80-e71f15e69c9e",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.2"
    }
  ]
}