{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a61d5bbc-958e-5c0c-845c-c14d827e1c38",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-jdbc",
      "version": "5.3.39-tuxcare.22",
      "purl": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:2b1af6d7-a18d-56d4-b286-9ee274ee4929",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:354e117a-2b25-53bb-a2d7-5284d8b9bffc",
      "id": "CVE-2022-22968",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2022-22968 does not affect version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6dbe698-de41-5894-8842-8b53065d1a5e",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:211c48d7-bbd6-548e-b807-85166d739b22",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9cbe34c-457b-5a3c-9766-c6781684d643",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5576e17-cf8a-524d-8e03-f8237ca3319a",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9990787b-0741-5ac9-a886-7b9c13a11413",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c2d73fd-bca1-5d58-bb85-87b3a5738edd",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-jdbc 5.3.39-tuxcare.22."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b8f9e21-a25a-507f-ae9d-11ea7dcbeb60",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0a8fe73-aaff-5c89-b1e0-424845fa9ab7",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:adeef0bb-ace3-5b85-8531-9e33d093cddf",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c962059c-678d-5f6c-a14f-007deeb6e421",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14d04747-f9d5-5699-9e75-90a6ff144542",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d52d3a7c-e5e2-5f29-b6cf-191c1560319d",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe7b71e3-7552-5fe3-8251-b33a66880beb",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c9b62f9-782a-5a94-a5d7-a44f4e2fbda6",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:029a396b-1f54-53a3-b438-06e87ee5d314",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc12b4f2-562a-5f02-b53b-4b93703bf1ff",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2008834-155e-5115-a13c-a8c6d4dedf24",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4bf9eba-58db-5ee4-a16e-d8e44bf3869a",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce98c05e-8ad8-5d18-a9cc-369b8e9775eb",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c122bf76-bc68-5952-806a-ad639caa7a5f",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ab2c100-4d7f-5c60-b10d-b29110fb1f49",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7a3fba6-fd7f-5c47-a328-2fe2d5a59711",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f295ce51-c498-575b-b394-8099945bdede",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edf3b40e-9184-5831-a7d0-046ea11118c1",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d43bf14-2ff0-5688-953d-d75a4a8d0e3a",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a2811e0-a33c-5d79-a4ce-3ad772875d24",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfb22a1d-6dfc-51e1-b9a5-39d0555f9a6b",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4948251-9070-535c-a422-2c57292a0438",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:151d4e8c-046c-50f4-b38f-5e08c3a8ad69",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1ae5489-2468-592b-a6ff-d9d2cc0b1f8d",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e88ec9b1-bb1d-56f1-8d1a-c0a29878e931",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3855662-78af-5dcb-a19b-c8b4d13ab2db",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb5cadcc-5f69-5993-83cd-a7c09fccadc7",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e953e8f-8619-590a-804b-97c6b3fd2eed",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8d4dfc5-5b55-5d60-a02c-10bcdc8d7e63",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb944c44-208d-5295-8378-a0169544d0bc",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afac2aad-162b-5f58-9cb8-4139155e6d52",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5361f47d-950e-59bd-99d3-568ed16a0725",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51e889b4-67d3-5b85-8f9e-b70ad47cc411",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a605a81-3c60-5bf4-971f-55303fe65b50",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90507529-b7c6-52ac-9450-e78d8a95bf44",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56c7684a-328f-5a01-963a-98a4c2c181c1",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bc21f26-9214-5948-8c3b-fb0986655047",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2a36969-9550-5146-9d84-e4c4795012f2",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2d7a2f1-d7ff-57dc-b134-bef5a3ca14a9",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.39-tuxcare.22 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.22"
    }
  ]
}