{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:15d5909d-8e98-5727-893f-5f72262cc814",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-orm",
      "purl": "pkg:maven/org.springframework/spring-orm@5.3.33-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-orm@5.3.33-tuxcare.1",
      "version": "5.3.33-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-orm",
            "purl": "pkg:maven/org.springframework/spring-orm@5.3.33",
            "type": "library",
            "group": "org.springframework",
            "version": "5.3.33"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.33-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:73c0c597-3b91-542c-9025-4edc0fbf60ad",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.3.33-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.33-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e67b7fbc-b324-5fb9-bb5c-43791693ada7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.3.33-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.33-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5e01cdcd-884d-5d8c-ab6c-4f886784d80c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.3.33-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.33-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1de674a7-4d37-5527-a00e-7ffa23a848f3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.3.33-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.33-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8892144c-60e4-5237-aaad-9192b7e9bc7a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.3.33-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.33-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6f4b124e-6432-5d0e-9aac-0e89df1a2d4c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.3.33-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.33-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7066071a-5981-5478-971a-d0c84c1f312a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.3.33-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.33-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c3316999-2358-50e1-818b-49b6cb9f9825",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.3.33-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.33-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:de631485-2a39-57a0-a202-840559088564",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.3.33-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.33-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b3ea682a-8d4d-58cd-bbc6-a0f1e45d1fc3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 5.3.33-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.33-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ab2e1128-eb6c-56ad-8233-998335d1c3d9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.3.33-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.33-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bd9e4f94-e028-52f2-a1a6-81684f7e5884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.3.33-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.33-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e8a3e234-ee90-5fb4-a608-f0384b006225",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.3.33-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.33-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d5f0d5a4-abe5-5aaf-8f09-0909701f0a0f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.3.33-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.33-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b291802f-3443-5ffa-968b-1417d4369261",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.3.33-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.33-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f71d9a65-93d2-57b8-9755-2998faa5d2a4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 5.3.33-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.33-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7f05fc4a-cde8-5d34-8cbf-51cb41d28cbd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22965 affects version 5.3.33-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.33-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4146c3ee-74a9-5107-8216-4e3f35bba513",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 5.3.33-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.33-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1848c8a6-a149-5cb0-8150-2cbb9b3eacda",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.3.33-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.33-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:295c4328-0b9c-570c-b7e0-f9b6113eb3ab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.33-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:44101289-97ef-5464-b744-153a498290dd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.33-tuxcare.1 of org.springframework:spring-orm, and is fixed in 5.3.33-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.33-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:82a00a0b-6080-5f24-a640-463544029692",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-orm."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@5.3.33-tuxcare.1"
    }
  ]
}