{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:652ff213-b3ab-5e36-a479-94c973f26779",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "5.3.39-tuxcare.22",
      "purl": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:d27ba78f-6109-5878-8a1a-f31c9da4af6c",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61520512-7588-5a80-ba17-29cbc4336445",
      "id": "CVE-2022-22968",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2022-22968 does not affect version 5.3.39-tuxcare.22 of org.springframework:spring-orm. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fea1f63-e0a9-51d9-882c-7d95269f8ed3",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2d19c2c-9190-5283-a65d-a07891b2ab45",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28438de9-114a-50c7-b4ee-65c131a397df",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f95cf43-6d9f-57da-b224-26f5c7c0abfc",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f336826d-4f35-5cc5-8afd-e00c67af1d30",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ec54150-9bc9-5e0f-88f4-ad8876fec760",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-orm 5.3.39-tuxcare.22."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7c7ef61-f11d-5df1-9ca4-b2a5a01e9934",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f67549eb-756c-5dab-a7c4-b76390080564",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14c20b7e-cbd1-5853-a193-fb3d66cc17fc",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:064b8b32-20f1-56af-a06f-5211a11275ec",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d883b074-e041-564c-939d-3f15ebb7b3df",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f940568-e497-5885-8580-3cd59e47036d",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3131adf-93c9-5a83-937b-4b299ac6f04b",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6c74ce4-d322-5620-84da-50e08a05830a",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a326b009-8571-5413-a5e0-d17be4b67a21",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af05d9b9-2a7d-55b5-95d4-307e3279e65d",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c01a0ac-0c81-556f-81af-7bcd77ceb4cc",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71acf49d-78dd-590e-84ad-a8633ae8dd49",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3d32d5f-5dfe-5256-b755-501ce65d1c59",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:534d0e1d-f0bc-5b0c-b6ad-64417355f233",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8809addd-bcbb-5f50-9d31-0369b769a51a",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1540110f-21b6-5152-92b9-4e76057506d2",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f622cb18-3eb8-52a2-b810-ed0b73c55bbb",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14a05029-af23-5770-87d1-4aaf8045417d",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ce4ce78-c08c-53bc-b647-9cf8678c6bb0",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6779602-92bb-54f9-981c-0541d257dce8",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e6b0e11-4ae8-5729-90f5-5330ada9f52c",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07f66459-e54a-5ad1-9bf9-b036fb7de553",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd405f26-ae39-5788-b1e2-c29ce4bc95c6",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09919950-c288-5fd0-9a37-4dde5708f30f",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6529c6bd-6096-5f61-99b7-5a9286d19a38",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:feb8fc1e-e4eb-5881-8333-0b23df0d0d33",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eec31f03-f096-53bf-8ea1-29d10eba2917",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37049504-4393-5222-93ac-704acba28828",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49ef9581-08a1-5bf0-843e-59e5c84511ef",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c64da404-d39d-5ae7-88e7-54fb70412616",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93b73c83-7f70-59ff-bee1-413ac0c84008",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96d6c0ff-c2af-5c88-bd1c-cf111bdb3674",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d20f0603-fafa-5ed1-b1a8-3c4d687943f2",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb8f0277-c99d-55a1-b94f-438bcbed26b6",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bc44e48-a8d0-5beb-84f1-516ce7a0b9dc",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28ec51cb-17f4-525c-927a-6877dd65ffcc",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed3145dd-888b-5de0-86ce-8f5394cc100f",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fe3380e-deec-5dc2-90da-015a8eaf5cde",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58fa3b3d-cdf0-5452-b53b-589c9be5d722",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.39-tuxcare.22 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@5.3.39-tuxcare.22"
    }
  ]
}