{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b781fe3a-914e-593a-83ac-3691d6db4add",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-jcl",
      "version": "6.0.12-tuxcare.1",
      "purl": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:ba6b85e4-6387-5f0a-9f6b-de2eb6a2bdf3",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3a39e36-832e-5228-87b5-910110c75511",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dfed7c33-e3fe-5447-b84b-298683c35e17",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b87c0f6-508b-5464-9300-a8beb87a0030",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb740b5f-7150-5588-9b5a-39606a90810a",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:208b0b9c-0968-5239-9126-057db511aa79",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aade308e-b7cc-51d5-9075-09bb605385aa",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4012753e-7129-5496-9808-0c3eae452bf2",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d94fdfa-009f-5d7d-9863-b0332ac36047",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee19a39e-cf15-540e-a075-329757e34bf5",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:abf8aa52-6b12-59fa-ba48-3ff8c4590bbc",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38c3c0fb-8a8b-5078-adbc-b60e039b4073",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df9d2726-f73f-566f-aa05-bd30171450c5",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:468d6725-66ff-5bc8-8a3a-059b9bfc4496",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f43f57a-51b9-51a4-991a-51a90310b784",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71554539-9931-50a0-b384-5e19458d1ddd",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:541107d7-631b-539d-82a1-28710b118bdf",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21a4d072-e008-59d3-a4f1-047bc6206b9b",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d44490ea-5470-541f-8fb0-7b4378b16241",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1ae15d1-1a65-5428-b4d7-380022461036",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41839 does not affect version 6.0.12-tuxcare.1 of org.springframework:spring-jcl. Current version of spring-framework is not affected by CVE-2026-41839 according to the vendor - https://spring.io/security/cve-2026-41839"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc0b137c-0831-5ec8-9a84-6521dcc7fd98",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7246bbb2-ec29-53f5-b07b-d4a2387eab0b",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48a41147-cb91-5d1b-b07e-e74b9985cee0",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:556474a8-ea91-532a-bf1c-2ce5418bd14c",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f2b464f-2179-54d6-bc4f-999495708ccf",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b179e9b3-3a71-53d2-b58f-bcd775205bdd",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:731a8aff-316c-5d26-a8de-f7885405590c",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b69697f7-360d-5b84-a8ad-1b15ed66dbc5",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30a405d2-1282-5487-8089-c51080f8b992",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:051375d1-cb04-574d-a298-12b62fc8960d",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e500e6d4-ff69-567f-94b6-04448a4bdbc4",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:570c884f-5c8d-5b16-ab29-8a630f5203bd",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e09e1745-0c15-5846-abb1-ce433312f64a",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4036c061-d3d6-5449-8001-2cc48ff1d8c9",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45ca07e1-8693-5ba6-a93e-631bce257121",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4710503-066f-5189-a092-ec8770b46b6a",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:309638f1-6cf7-519f-8fbe-f90c6a8ff5a7",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf9260db-3f98-5faf-bca5-6f5df15519b0",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2dda043-60ee-5f62-bd9d-635451e16122",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c10036ed-682c-55d3-8c30-9fd92cfd51bd",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad2c797d-1f21-588d-8897-c8d15d853d39",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5df74cec-53fd-5fea-828a-35bf3d0b3124",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84e4d6f3-28ba-5667-a756-f211bdb21d1a",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac40e269-97b6-5e06-9356-e318caf9c82b",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a63267c3-de33-54e2-a6b6-66ebb27c2fec",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7098999-b3af-5acc-8888-7e62e2740302",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:168ac21c-697c-5b7e-b9d8-4a158dd380e9",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-jcl@6.0.12-tuxcare.1"
    }
  ]
}