{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:43462a37-4792-53db-b5fd-13dfaeb45570",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "6.0.16-tuxcare.6",
      "purl": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:0c8a7871-eaa1-51c3-a0ac-6f482b3ea216",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe8e9eda-3b85-5e3a-94a9-9894bac61b98",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb5cf93c-3610-5990-85ee-3af7627185ff",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3cc32ac8-26c5-5ce7-a92b-27c7a2e456d8",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5ed385c-e453-5f0c-a314-3f88ef9a343e",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1f7698e-8278-5999-916f-986353240d3a",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92f4d98a-0d14-56df-a73d-8c3d622c00a7",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2cb1f0f9-22d1-50b3-8a93-f1d07474330d",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad7d29db-91ff-594b-bf8d-7d4c8db90063",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eac19040-bd0d-5859-9e3f-a9aadad75ba0",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fbcd73b2-f387-5701-8972-7bc1ed25fd0a",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71a3cde9-cb4f-5d69-af2d-5ff7f977d667",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f127f89-cc42-54b5-9b00-27b88e2534ca",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e09d3d07-12b5-5eb7-a006-1567456de9cf",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f795a75f-7d05-5119-a11a-4cb0f378ded6",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ead58fba-fa7a-5fc6-b2fc-93f97835ad14",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05a0cd83-875b-502a-8ce5-d43e1ab2e3dd",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d6a91d3-0669-5384-ab9c-0c677e0983c0",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2651c100-184c-57c2-8935-b3916b6a9246",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d59801a-4364-5235-9a24-b016ad2275b2",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cafcd19f-a1ba-50ab-b4ec-ba28bab9a48c",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:320b9db6-36ba-5eb6-aac3-0ffe0c669f54",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2a5265c-91d1-54b5-8d89-f2e4da0984de",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7b4dfb1-d47e-500e-9f45-70d546aa49a2",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23e54393-7cdb-516f-bf4d-38ba08b5e2dc",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0576a009-de01-5ae4-ba86-a136bf666bf9",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32ff877a-ca5d-53e6-8f8d-04625c4384a8",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dde45bd1-bc8b-5a8e-a752-26cb6a1c6058",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62b8f0e4-abb4-5469-8c75-4e9c7898eba8",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b02569c9-6bf3-58d3-945d-24e31eb1888c",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c82447b8-07a7-5bfc-9abc-eb2707d42e9c",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02b6d773-f610-52b2-a3d5-be479e3cec48",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5782a737-d7e5-58e8-83ad-9e290d852284",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2d390e4-178c-5223-a787-974c3fc4e5a4",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aaf40c18-5485-5fb1-8d4f-fcc97a600b36",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:faf08202-08ad-54ed-96d3-eb41bb284329",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62474b6f-f9de-557d-83f8-f219de70d0e4",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e1d1956-fd5d-5b0b-90a8-2fc01f1dbb40",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5f8f501-81f8-5518-a8f6-e62f4e18cbbd",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:567cf686-9f2e-50ee-83d4-65d092b53f80",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ddeb2e5-7228-5120-a40c-f8ce89100755",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:219493e2-8c0d-5e97-955a-d9d5f622783f",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c05c2a5e-6c0c-52df-a087-6445bc2cbdf0",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c91b4688-1e07-5a8c-8d17-06e2c047c0bb",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b146107-64f3-5f2c-ad9f-47ce946d29bf",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69b7fc9c-46a2-52d9-893e-68a9bab8b531",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.6"
    }
  ]
}