{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b324cda4-bc86-5492-87db-7da1765f06be",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-orm",
      "purl": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.6",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.6",
      "version": "6.0.13-tuxcare.6",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-orm",
            "purl": "pkg:maven/org.springframework/spring-orm@6.0.13",
            "type": "library",
            "group": "org.springframework",
            "version": "6.0.13"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:9e13d7f7-1e2e-5a4a-87ad-4588eba10bac",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 6.0.13-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:7542c3ed-6446-54ae-83ea-498c28ce5be4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 6.0.13-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:cf8774e1-4855-5633-99ea-7c65f62fa14f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 6.0.13-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:a92de081-2f68-5ce9-8d48-1610e8e15878",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 6.0.13-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:366e16e3-0fa7-52c3-9ed3-f43893b3eaf5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 6.0.13-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:55f0434f-de09-5570-9bd0-f54f789df8b1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 6.0.13-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:0d8f46a6-ffb8-5e89-9c28-2c95a62a79f5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 6.0.13-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:967f8a57-eeb3-5f98-9691-05e608eb051c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 6.0.13-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:3365432b-db9d-5491-8aea-dc05b6776d64",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 6.0.13-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:cb5398aa-f561-51b8-8836-7b676a7093d6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 6.0.13-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:3ac737a1-de0c-540e-86f5-a46a4b16459d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 6.0.13-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:15637c76-16b6-548e-bc2f-0d4e1200060f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 6.0.13-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:047845a7-bcb2-5ad2-9cc4-938b4d94cba7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 6.0.13-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:f92b3a76-9773-5510-8fa4-2a6f3122a4b8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 6.0.13-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:c40057d0-31e1-5866-b33f-1fac81fb933c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 6.0.13-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:64b40d34-bdd8-5998-a42b-574fd8613732",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 6.0.13-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:c2e8c4d3-7fea-5d1f-8f42-3adee9c4a537",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22965 affects version 6.0.13-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:c3cd1348-a59e-5f3f-a98d-bcc6e86cee41",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 6.0.13-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:14bb0155-7f49-5a7b-80cd-c7c9712562e8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 6.0.13-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:76d42e00-8f8a-5871-8df8-e0738226bffb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.13-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:7de44a1d-6bfd-5dd7-9ebb-da6889372af3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.0.13-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:89e86306-08aa-5dd8-acc8-2178b5581871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.13-tuxcare.6 of org.springframework:spring-orm."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.0.13-tuxcare.6"
    }
  ]
}