{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:aedd932b-06c2-54f0-af63-cf948ec1af43",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-instrument",
      "version": "6.0.12-tuxcare.4",
      "purl": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:a73f0235-1497-57f9-aa45-b8ab7b4272e4",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c3b5612-78d9-52ed-98c8-94a386c57489",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a63cabde-ebe2-59e2-952a-5f944eb825b1",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2ecf869-d0b6-56ff-9d61-f3ff6774d15a",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:803bae3c-469e-5154-909d-fe8a3869551f",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0dbebe2-b446-57ff-9ba0-e3f1f34c5c76",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78783d77-bb6c-5484-98cf-15d06d11151b",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74469a71-667d-55f7-8872-fe5f924f49e4",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0e32e39-5685-59e0-8c84-92ba6d3be4ed",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3918d3f5-84d3-5bf2-8d40-1776511e016a",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a82165e-20dd-59ae-8d87-029111de11c5",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:985d0576-0d25-51e5-af4d-6dbef4f2db96",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2771417-adeb-56eb-aacd-b7895c0d6489",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5dd5312c-bd72-55e9-ac3a-f6cf7e3678ea",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:961107c0-62cc-5536-8ae6-93fb085b78a8",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eba3e0d2-8106-5d61-aadd-b3727a2b6117",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:966bd943-e004-56c8-bf70-f82345ee363d",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee8ee443-d6dc-5281-afe6-7d9f1e51ab47",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51ee51df-a803-5b6f-b92a-4a317f0d329d",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de7d18a2-3868-5a8f-a902-cc850c280b83",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41839 does not affect version 6.0.12-tuxcare.4 of org.springframework:spring-instrument. Current version of spring-framework is not affected by CVE-2026-41839 according to the vendor - https://spring.io/security/cve-2026-41839"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b4a6b7b-0de4-548a-9ade-af2fc082c5dc",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07341c6c-879c-5e67-8eef-2d10749078c9",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ee1c1a9-ef18-533b-9a5d-1fa8bd3c7357",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2f8c60f-707c-5732-b762-3e21c765265e",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb22e9b2-77cb-5d6a-977b-9c0d714395a7",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0eba9dd-a820-5676-97fb-cf0c65813e8e",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ac88bff-bfee-5fb4-af6d-b2829ac8cdee",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31c4ada1-97fc-562f-9e0f-13428d6e0a2c",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:966c977b-d41b-5c99-bc64-b871dc1d92d0",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b6d0f27-c02e-5c69-a01a-271ec64e6d98",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d13d01b0-9b09-5f23-a24a-e03208dd0c2b",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:abee0fbc-d4be-5153-9e94-453f2e769d43",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1253dbf8-5196-5435-aba2-507da891f401",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46cc1c91-1feb-546e-8410-1a75993d2e93",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2526979f-af71-58fc-b787-664430b69df2",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a442733b-7ec5-5af1-b514-8df37be61eaf",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca745066-a5ac-536c-8571-622ce9b1f85a",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26747c94-cf1e-5226-8ed7-ca6630406d8e",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69f14465-6d11-587c-9a7d-397f52649ade",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6954daa-cc6c-5c7c-b4ce-8330bdb526cd",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ec3d4f2-6354-50ce-a459-895875b2c284",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3dd6cdb-bf5d-54a6-af61-104b6dd90f32",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93109369-1710-5e3e-89a5-18c52671d829",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:099b83d8-f13f-5034-9064-bcb0f0d97ddd",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9a6f318-2203-5a58-8cb0-f0162653ed7a",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6f43dd9-2309-5449-9e29-1481a65148e1",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52951af6-928e-57f1-86ee-6cc54a7c0156",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-instrument@6.0.12-tuxcare.4"
    }
  ]
}