{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e58c7466-aa97-51aa-8f9c-508c2d351ae2",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "6.0.13-tuxcare.1",
      "purl": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:8acd81a4-b48c-5963-8492-65bec28175bb",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8994d1c0-8e8b-5fcf-8e04-65534d84b8bd",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19cb209e-2e27-5820-81b2-5c6a46cfa9fd",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60041290-4138-5578-aa2b-fbbac919e5f8",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a58992b-e196-5675-b193-8e52506f7051",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:174ae49b-34a8-5778-8d7d-384b91b9d50f",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83b0ef27-e6ef-5628-be9a-04c214f85b97",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:558349fd-a908-5136-8f24-b2fb1c1e5f6e",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd4c6a9c-5628-5dcb-9ae6-d6a183377579",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce19c619-2679-55f4-a967-057bde64973a",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dba018ce-a893-57a5-878e-f7d40544c7bf",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:786c0466-bde3-564e-a9ae-3e280c74966e",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d405bdb8-5625-50a6-a6ae-08f4934744a1",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6bef4e1f-49fe-54b9-95f7-c4f9a1da2040",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:139a2859-1bf0-558f-abfe-080f17f6f96e",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36d84bd6-2ae1-5210-95ef-389b2e0350ed",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e32bbc6-2057-565f-ba4e-83f92e7e7a4a",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb718375-0b02-5427-8b0c-ebc9af80f2f7",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a090bc8-f4c4-57bf-a9d0-d7e683c373de",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3ec87cf-1338-5a86-a97d-f5f9e264c111",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:379d30f4-1479-5899-97c9-6fdba014459e",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c36625e2-56a5-5a54-9bc2-e539edbadb9e",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c240330-fdf3-5c98-b99a-8119d367409a",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd51164c-c8a9-52bc-be04-b1e297c27505",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:671a483b-e93d-59f7-9d5e-fd18e19250dc",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6fc81866-181c-5743-8b28-7e623c6f60b0",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4043ee9f-94a6-524d-bba1-a484c0e5fb1a",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be299860-242c-59c0-b9aa-b9c28f3569bc",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19910fe3-38d0-5d6d-a5ac-8fbb7173e52d",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65a3e11f-1f97-5234-b1f0-96610d7bd20f",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c17554b-0b2b-56cb-b513-a6c4df537d26",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66a6542b-f615-54c8-abac-588a7b15fca1",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86ae74c6-e1dd-57e2-8d89-8ebfaf29b3ca",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d40bd621-0789-55b2-9061-f50132cb6ddf",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8d85b93-eccf-532d-94a3-8b968ae4ab63",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a920de20-e18c-5c1b-946e-7d3934f6192a",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:943ec867-d75f-5d63-8f61-ae54fd598c79",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74b2a738-4e4b-50fb-88a5-0b78aa40b1bf",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4846b33a-451c-554c-aa2b-81405a72c72b",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71d3f6ef-163b-5ce4-9a18-1ea4fe2092c1",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:920f4bcb-2404-58cd-b694-d8b57ac0c70c",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3aa3c97-f008-5c8b-9908-b12dee9e0fe1",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18b7ee49-cc5f-5d6b-928c-f8a22b5edab2",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:112682d4-a027-5308-9c1c-f6dcb2b91b28",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e9eaa04-5bf1-50ab-8fe0-0ddb41b39175",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55328f37-f57a-5dc5-a4a6-8cf0d4994a1b",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a523d138-1f16-5478-8ff9-a9626b347e5f",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.1"
    }
  ]
}