{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d76ed1e2-cf6c-5233-ae69-0e35aad79647",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-jdbc",
      "version": "5.3.39-tuxcare.23",
      "purl": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:0fa92253-5cc3-5ad9-8443-97103049c690",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d7f9c5a-8529-5e25-95b9-b44765dca4b4",
      "id": "CVE-2022-22968",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2022-22968 does not affect version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5af3ca14-6fe8-5b7f-b257-953a4160573a",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4cd5d9c-cbe0-5b7d-a7a6-c92054877a37",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:235e2e93-3e9b-5260-bf5a-4716b6e19c8b",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b432f53-e1d3-5183-8cf3-1a7945d7d5d4",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd301ddc-1b0d-5ff6-bcf6-884dad0fd8c6",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89217cb8-b4ce-5631-9dda-0f7a403b80cd",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-jdbc 5.3.39-tuxcare.23."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b436151-4285-5dd0-b129-6346cbccad04",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:682761a2-3f20-5466-8d1d-e10579761731",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34005b35-a4e0-5d4b-aa51-1b71cf7ae831",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4af7c63a-0ed5-5d37-9cfe-82572fb7063f",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc60c215-7c90-5bfa-848d-d8874f8f1e0a",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77c9a557-db9a-55bd-99b5-ac897da084ff",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:979cd538-fe56-5464-865c-d13bb2885760",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:831f9ee8-7312-57f6-aa0f-1748fff777ab",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7af861c0-64ee-5b24-a4c7-8ef4eb36f7b9",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42366479-d368-5cea-a28b-dd5158f71a1c",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a469e10f-6a1d-5b9f-8a20-a4b67cabbefd",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f66b65e8-7c40-5705-81fb-c11d4e3c7b4a",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d90f7f37-e6f2-5bf7-8638-69b2d3a04133",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53808340-ba92-5acd-a9f1-2eb26d821a1f",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6176aaf9-687d-58fa-a022-a2cd264d96c6",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e60b1d2-a827-5dba-98a0-aa27a137cc26",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:882d3d28-a308-5424-9392-792f177a1a9e",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca461950-e44a-5e08-92b4-6295af59daf5",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc5b3a5a-1ca6-5752-bf52-4ffb100a3ed7",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f01a316-8bb7-5059-9971-ef25621b9252",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91623f04-4355-579e-808f-733add78b074",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f056332-16ba-5997-8100-a72a488e75f4",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35dbbdef-d66d-568d-9e85-c9528c77abc3",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b9bbda3-f734-557b-a3fb-b1dc75f68e6a",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e7adc72-d7bf-5c20-b45d-ab963060476e",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:349b9f9a-ad3a-5f9a-a35b-d3bd9f7eb844",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07b2a5e3-a47c-5bb7-98c5-33d6603e8e26",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:765f1ed8-b260-5e16-a596-5a8d33c6e371",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2b504b8-aa5c-5658-9b88-bec4800009c2",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d7a75fd-7676-5aff-9ef4-18be071eba2d",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44df46ad-e494-5a7b-9815-b3c493abe9e8",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a148170d-2fe0-5937-b377-7e1e89d11dd9",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:211478f0-4fd2-543b-bbf1-a5eb0be47e15",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cf1c896-90fa-5665-8c6b-70ab9fafa181",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cb13b9a-f84f-5c89-a17c-046749cd4d8a",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e24fb570-7ebf-5b15-96e9-d084ca97ca3c",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9a6a313-ca8f-528f-bd55-61e4e9196164",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4e09e7a-04f7-5161-a8d8-cfc21f993fb6",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1528a578-0692-5f5a-9f90-de291c70eb74",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.39-tuxcare.23"
    }
  ]
}