{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:8c6fa24f-25c6-5216-a419-68e38adcac02",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-orm",
      "purl": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE-tuxcare.5",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE-tuxcare.5",
      "version": "4.3.9.RELEASE-tuxcare.5",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-orm",
            "purl": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE",
            "type": "library",
            "group": "org.springframework",
            "version": "4.3.9.RELEASE"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:3f038bde-6ed5-58cf-be3b-ae4f1d09bd7f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:9deb573c-0860-5ac1-9841-02238b99ee28",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:e56d0265-e863-574c-bf9b-b922b25dd584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:722f04ef-4344-553c-9340-a732e2213612",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:ca2063fe-77ba-5764-bcf2-68c148882963",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:5c25a380-29b6-5ce6-8ebe-6ec13f5b2002",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:c5db0a3e-5272-5599-af3c-2a1de3a5202a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:f6c54672-8f11-525e-bab2-c50ae4eca958",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2018-11040 is fixed in version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:8d5f29bc-77f8-513a-865c-d5b9e0c909e8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:68d2c5d0-ecd4-505f-b945-00a5d9b04102",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2018-1257 is fixed in version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:d9dd7468-e70d-51f0-8359-ccd25d4585de",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:40b8967f-983c-5819-84ee-dda133224bbf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2018-1271 is fixed in version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:2599eaa0-5466-5b62-ba8d-c8887117d62b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2018-1272 is fixed in version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:c36238c5-6de3-5d16-a3ed-04805d981d5e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2018-15756 is fixed in version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:1ea73594-e426-5cea-8ec2-2b1eef07909b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:10c37122-bbca-57b7-a9aa-074c2ba67dd3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:449537ca-ae45-580c-82ad-a86176669e80",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22965 is fixed in version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:d5d7569d-61f7-51d2-87ec-96366ca6bc05",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:11e04869-3e00-5b08-b259-168265c07737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:e877e4e5-1574-56e5-ad57-f22397728d55",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:ee97860e-f7f8-596f-80dd-d74e5d592456",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:2ddd6826-f33b-59d5-aad8-39c6c4682d59",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-orm."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@4.3.9.RELEASE-tuxcare.5"
    }
  ]
}