{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1dff3745-18ae-5083-b490-c2bf0876cf79",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-orm",
      "purl": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.10",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.10",
      "version": "5.3.27-tuxcare.10",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-orm",
            "purl": "pkg:maven/org.springframework/spring-orm@5.3.27",
            "type": "library",
            "group": "org.springframework",
            "version": "5.3.27"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:c9a35f4c-4b77-572d-88be-25bc09a7694e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.3.27-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:c10cc6ce-9b32-5d6f-857e-826bd79f57a7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.3.27-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:f623a78e-a294-5cf4-9e04-99a88b44e247",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.3.27-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:cb73a146-81bb-5f15-a424-a8e2ebc9d4ee",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.3.27-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:38a4921a-e3f1-59c6-8b3c-73a6121f8f72",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.3.27-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:b7e17aba-f047-5806-8ada-c465c29f9bd6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.3.27-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:710da770-e22a-59c0-b273-4a4bb34117f0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.3.27-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:03e920bc-7895-5990-8e58-708e7bd171d2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.3.27-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:4f9850bb-ff35-51e0-b8be-2c66cfd6ff87",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.3.27-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:fe5ba8c2-3266-5c22-bc6d-e0b0f9224a10",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 5.3.27-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:1b6ce159-a09b-5a18-8495-56a96f33b366",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.3.27-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:a468ba70-7e08-5bce-b789-0c8c8a818ff3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.3.27-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:bda0a6b7-54cc-5c36-988e-2bae002b78a1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.3.27-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:bbda03b4-41a9-5f74-b5ac-8e76f49b54a6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.3.27-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:9d292c47-7385-5122-8401-1072f06c8687",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.3.27-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:ac072574-b0e0-50a4-970a-452f3cebe5d8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 5.3.27-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:c1a92169-5f22-5ff4-8110-878bc67df205",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22965 affects version 5.3.27-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:f6fefb6c-f571-53e1-ba08-75beaf93d5e7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 5.3.27-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:0631d1a2-99e1-5a66-98a2-f6b5079e4643",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.3.27-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:5ac11502-8b63-53b5-b31c-29a7b0216ae5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.27-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:0aeadca1-f30d-5db3-bd2a-6ae264a8e53f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.27-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:de291335-9333-5347-b1e7-a0173e409b0e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.27-tuxcare.10 of org.springframework:spring-orm."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.10"
    }
  ]
}