{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4adb8c0b-f5df-5f19-9d51-cb658c5c5176",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-orm",
      "purl": "pkg:maven/org.springframework/spring-orm@5.3.7-tuxcare.10",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-orm@5.3.7-tuxcare.10",
      "version": "5.3.7-tuxcare.10",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-orm",
            "purl": "pkg:maven/org.springframework/spring-orm@5.3.7",
            "type": "library",
            "group": "org.springframework",
            "version": "5.3.7"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.7-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:3a78af73-6e45-5334-9ee3-69da7d1414a7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.3.7-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.7-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:c1f56513-9e19-570c-a373-3a97dc8b527c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.3.7-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.7-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:c03e0903-2663-52e0-a896-e458dfc933c2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.3.7-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.7-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:8bbaee61-8ba9-574d-a252-711164812dbd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.3.7-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.7-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:18328a9c-b152-5e8a-8b1b-6c1aa04da5b5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.3.7-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.7-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:26176205-b47e-533e-9368-41911c312952",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.3.7-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.7-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:eefc6ecd-7455-560d-92d6-3cfd389c0648",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.3.7-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.7-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:e293f169-b0e1-5349-9c67-c374b801e261",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.3.7-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.7-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:9bf9d068-4be2-51d9-abb0-7dd656bb3f41",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.3.7-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.7-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:33bbd5a0-6ed8-5bd9-a2f6-2f552c9b08ff",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 5.3.7-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.7-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:1a9cbc14-0fa1-5c7f-8c8e-0bd7172e8125",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.3.7-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.7-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:b84b535f-ac53-5aa7-8ac3-8cce03f6735c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.3.7-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.7-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:3780b9cd-bcfb-56b0-aa92-775d44c77611",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.3.7-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.7-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:e04608b4-91ba-58a0-a01c-3adc64f6ba31",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.3.7-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.7-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:707c1d87-956b-593e-adb7-d42e97089244",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.3.7-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.7-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:be9b9ed0-006d-5512-9647-a846bbe3d288",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.3.7-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.7-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:4a19fb20-3d66-59c6-b93b-6af634ff5c4b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.3.7-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.7-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:3b080ec7-d882-5ee1-accb-a6be9a95ef34",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.3.7-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.7-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:de27f3db-847e-50a4-97de-22382d91e655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.3.7-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.7-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:ae4dfd9b-159b-50e1-a3c3-ad4356f68d92",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.7-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.7-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:d6bb29df-d22d-5329-b603-518928562ca4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.7-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.7-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:1515e68e-c6b2-5203-963b-5a1b2a2b95b0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.7-tuxcare.10 of org.springframework:spring-orm."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@5.3.7-tuxcare.10"
    }
  ]
}