{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:18234d3a-52e4-541b-880a-1d380a8cefb2",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "6.0.11-tuxcare.3",
      "purl": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:48f78a3f-5b91-5cc7-be47-5581672e0e4e",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:038262c1-4caf-5ae2-926d-d09a9f26d4c9",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54cee76a-5ac8-5371-b121-651f20139c43",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed6ba65f-88ed-567c-880c-b039eea44722",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4793a6cc-e7ae-5c92-9f17-be4f63778bdc",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce87e3a1-99b7-5d7e-bc48-400886597150",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:933f3e64-8ba4-5189-a063-e49c86fd995f",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f1d4b6c-07b1-59a9-93ba-e7edcf460a6d",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f30bee90-952f-5f18-84ca-8144733d1c14",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fecf10db-8940-5192-9765-67bb8c982ee2",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2529792-acf6-51b0-8ef6-5156da49eadf",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:435792ca-bc9a-562a-8ab9-c362912d92a5",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15204074-97f0-5d84-b3a3-3fba26875888",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7ab8fc4-9170-5e5a-96ee-3cccaf5c0007",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba161e35-6ba0-5138-bb70-20eacbfa558e",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf839b22-ab99-5c3e-9ee7-f5742cc23a8a",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d7fa3d7-76a3-56ab-adf9-79860298c205",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e068d3dc-51fd-52a3-adbc-b178861279da",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e61070d-6054-594d-bdbf-a0b43cf1941b",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06cb07a0-03fe-55f4-b75d-cb70166787ba",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b71c5f39-c1c4-530d-9ac2-72a84f2f01d8",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a49e55f-4dc4-5ba6-bf46-c8f5de009ca5",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6fd407b-60cd-56de-9f99-bfc8b604ac7b",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:008881e8-9b7c-5c50-9fab-a81e24286a90",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5473a9db-6946-599e-b166-1857343ba0b7",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7e0c37b-555f-57d7-86e0-aefb765bdb46",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f100894e-1ccb-516b-809b-315a6e3984ea",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fcaada95-c9ce-5d62-bc35-9fd90e2b93f6",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:602027e1-e60c-5554-a271-d64e837e405d",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8dca2fc3-8cd1-5956-95ce-ff4b74a789bd",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5be0c93-b361-57bc-aaed-d1608e4e7a5e",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:742c75b5-f53a-5cf8-abc3-1db5051ebdc9",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c4e8cfc-3b9f-5db2-9086-e1d3b4de3314",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b27f7b3-e157-5908-abbc-2545debda9be",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e6bb8ac-b2c2-56b0-a37c-e4e9c2b27933",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d683b558-92e8-578a-900b-b042198908ea",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cef3b0ec-0ef0-557f-8e9d-fa2de0c472f5",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba3d0f33-3ae6-593d-8431-99a7444afeee",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6fd2031e-b562-52c3-90e9-90a64832f018",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc6d7923-a7b4-5388-8bb9-6f83c5144f08",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f3c8d88-881c-532b-8470-51ea1a86aa4c",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3b80883-541b-5e75-9424-ee200d37e361",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:139fd024-b7c7-5fea-9940-db85e01f2f32",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14c530d0-747f-51a5-9d5a-c293495ab346",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ca82a07-6208-59bb-b3c9-a7454f5ef2b8",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7cb9b155-2091-5f17-8b01-20240469e99c",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41769aaa-30c2-54b6-b5db-fdc916bc3cc2",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.11-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.0.11-tuxcare.3"
    }
  ]
}