{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:8ee7b951-9391-56fb-aa70-e75cb15e9d0b",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "6.0.11-tuxcare.2",
      "purl": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:86f22700-d1f2-50af-851e-f35359650826",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c59416c6-b496-5784-add0-c0beb8796d15",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c28f6b3-6346-5d40-9fde-449ee3ff3a81",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bc30c63-c4dd-5a4e-9bc8-a2f63c2a3137",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0924a685-ab6d-5221-9890-00653f626896",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4916ec82-538a-5b72-8608-21127deb8877",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee5eccbe-23bb-53ee-96c9-128fc18765e5",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b87644fd-b944-5fe0-a27c-fd6cf6781a71",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a0b0ab6-99eb-5ac4-88e4-bb87f0128e47",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:392d7981-b410-5f1b-a209-b37f89dc2645",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d730971-810c-5727-9727-24b5dd6f0e9d",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad71fe78-6ec3-5249-a878-bfea2ca1eb61",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb9e5355-9267-57ae-8f09-715caed54ced",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ba29bcc-af9c-5398-82ce-8f9c1cef4bd0",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6812e501-eda9-5388-894a-708ce2dc073f",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0eb1e25e-789a-5f26-86ea-9f2fde1b01df",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4605b291-a698-5be4-b676-820413ee7dde",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e58a5446-f4d6-5a53-a5c6-d3c5afd8204b",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dedb37d1-38db-5c82-b30f-79ba408a683e",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf8233fe-09ca-52a8-a2c3-f946da009a16",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50dec00c-2b40-5ba0-b813-ce8f7840d138",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:192dae31-9f6d-5667-81c0-7ed8ef19a1c0",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ecedf963-3c63-50e0-bf56-e4b86353e47e",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31e3703e-392e-5bdc-bb86-2603ad7f3b31",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:938f3fd8-9910-5ab7-a321-03b6c1c05d31",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0991af15-1442-5902-a7a4-4f1d25da3605",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6343cb00-55fc-5493-8237-6be0f930602b",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58bd85ec-a59c-5569-9924-027ed682a02f",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b94648c-2098-5eb2-900f-a1df7a6f285c",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47905c62-2106-54a9-8135-cdf6ac7976ac",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:596d72a4-a0fb-5236-a79b-c8e770e0350d",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10cb97e2-2e8e-53f2-a1e5-fd4b7704c9e5",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7aaccc7d-b565-5aa8-811c-1878c66ef661",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e572f06-b125-5a97-87dd-7d37d56c4553",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c55eb9c-9317-5acd-826d-c6a1a266039e",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c69a3ae-8425-5732-9fb2-900118c2e23b",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b81b29cd-c3b5-51c2-ab6e-b61c23a338ef",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:277f13a2-0b2a-575b-9cf5-bc900f528429",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d00746a-e5d2-5004-b792-88e0800deb23",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa5b2826-504e-5a18-8a0c-6d6e85f971a0",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86ee2319-cc0a-56d5-be62-abf3244243df",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34636958-074d-54e8-aa17-0dfbf1c3a522",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6918df0a-1b5a-57e3-892a-737b754dc497",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:044492ee-9c97-5425-9f5f-40d2e9b6af89",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10469326-a274-5d58-8152-92ff214e1b86",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed28ec7e-c23a-5fd9-8c67-1e2975c68892",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a647cd51-67ba-5062-8795-16426bc9c67e",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.2"
    }
  ]
}