{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5d4eab6d-6556-5928-aff0-22e219fb4836",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "6.0.13-tuxcare.2",
      "purl": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:a7469e69-5dae-5525-9eaf-13e88cd47aff",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30676e73-8f23-508a-bca1-3cbfdce4f6c3",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eadf767c-9610-5960-bdee-9a031549941a",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4406f17a-3782-5c2e-91f6-95874d0434ca",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:599b6448-aba5-5047-827b-af0d709eeb16",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8839406-8377-54bf-8ce4-8d218655fdb9",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:976bda87-61af-59ce-b529-d2a5c97493d0",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e019cb6f-a530-5932-8fb1-883ec8ce7203",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29c691ae-0b33-5c7a-b2cc-989202d8d2f0",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b1ae352-3de4-5d17-a4a8-48e1c264ad9e",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1bb10bf-3f01-503d-a03f-6d05e4b13cc9",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e6506ae-f8bc-5487-bed5-3559b35260b4",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8359141-10cc-564b-9978-3007051e6a34",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94e163dc-068d-552d-94b1-6c14e5d0487a",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23f44b0a-cdd5-51d1-927d-62c7be3a6802",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f268dbf4-aa26-584d-b033-d8a146761e12",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83e4eb46-b81a-58a9-8892-428467f74d35",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93a22e8c-98cc-524f-b348-5765c825f075",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff9ffbed-3272-541f-b13b-0684a09c8a67",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80096393-47a3-5760-bd74-dc3195deddad",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e285f2b-400a-5958-962e-7c2cd5986bc3",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ace1330-db45-5e78-9440-86ff34554499",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fcd527c-314a-51be-9215-6dd0f02ecb6b",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a168441e-192f-5154-857d-b92ae8776b79",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e4c58ce-f8cf-5810-b9c8-e33ef6c9a704",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83c3e33f-6a34-5cd8-b46d-a85349c6caa4",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:253b78cb-ecf4-566d-b69b-d781e2c0eda9",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67df52c9-7356-52bf-b984-a62cb32b1e6c",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a517ef1-cce5-55e6-b2d9-306c65df1531",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef20748b-8a2e-59d7-a545-03ea10b7f2bf",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b67e8bd-9cc2-57c3-bb19-571a02f74897",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87cc0260-004f-54f8-8e06-cf418c172824",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b73f9b64-a625-580e-82bc-caaf2e588d92",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d30bf737-ae91-5981-8704-2be7367cb50e",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f91bd227-1df7-590d-8bca-9dd897b283b3",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed2b6c3c-619d-57e7-87b2-5938383f2cae",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16675f9a-104c-5886-b174-4a942c3c7d0e",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c744b23c-0f0b-5464-ae3d-abbf9b0f8892",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3b02432-9fc3-5418-98a9-42c4f5ecc39e",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7f54644-6713-577e-b985-e6bff4ad719e",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d833555-df3d-51bf-857d-d7d4e733a85e",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4169509e-9cef-531a-bd29-6b04daa8f064",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a6ff626-2296-52f2-8a91-64884b309836",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2548172-d113-5bd7-bbb9-a34f2b5498c5",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83421f6a-384b-5a26-97e7-cb2adcda6039",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09416887-97c3-5d58-b192-9e07d318fde0",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e3839ac-76bc-52f6-8ff0-75f72c7152be",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.2"
    }
  ]
}