{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c78b6518-a27c-5e37-b57a-d8633c17e6e7",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-orm",
      "purl": "pkg:maven/org.springframework/spring-orm@5.3.23-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-orm@5.3.23-tuxcare.3",
      "version": "5.3.23-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-orm",
            "purl": "pkg:maven/org.springframework/spring-orm@5.3.23",
            "type": "library",
            "group": "org.springframework",
            "version": "5.3.23"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.23-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:18595883-0f89-59c8-9a28-334a7546214d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.3.23-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.23-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2d86d3ed-edde-52e9-92dd-83488966a802",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.3.23-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.23-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d4e445ad-6ded-5b28-8ce7-9824b6e073d5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.3.23-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.23-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ead6fb2e-c8d0-570c-b698-4b6184103f50",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.3.23-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.23-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3b0ca6cd-c42f-50f4-a808-1c7fbf4b70f8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.3.23-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.23-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:81eb8bff-4cc1-55a8-bd4e-13629b6516af",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.3.23-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.23-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f89a41af-55b2-5b0e-a48e-537c4008bbb8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.3.23-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.23-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2d9000e0-5c13-5054-ac07-0cbc686b9e35",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.3.23-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.23-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:fa4c82a0-0de8-5b41-818d-c7fe19742027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.3.23-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.23-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f2ac3861-f7d1-56fe-b82e-33a4cb552bb0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 5.3.23-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.23-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:aa71ec01-361b-5f87-b699-fd2ac3328691",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.3.23-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.23-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f4b8caef-4a92-5edd-89b1-08948a730ed3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.3.23-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.23-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4a48d4c2-9874-5383-8926-ffdf9479e0ec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.3.23-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.23-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:607a9bf1-0bd0-581b-8f14-4949e77925dd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.3.23-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.23-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:54f301e5-5600-5355-896c-e1981b11301d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.3.23-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.23-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:433affba-818e-5914-96c1-1ca24fd5b93a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 5.3.23-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.23-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7c41c31b-c08b-522d-8233-191e3d5b1466",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22965 affects version 5.3.23-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.23-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c192a4aa-0c4f-5657-bff6-7840ef859151",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 5.3.23-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.23-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4ad7f9e2-9faf-55d5-bbb7-edda425e2b6a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.3.23-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.23-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0e7fa784-4519-57fa-969b-bdb7f62de07d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 5.3.23-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.23-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:88e42dbe-683b-5f18-9dac-e5de785f2467",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.23-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.23-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6a3e59d5-24ff-5c15-a2a5-b6588b18c59c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.23-tuxcare.3 of org.springframework:spring-orm."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@5.3.23-tuxcare.3"
    }
  ]
}