{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:98bdd79d-d3f7-5ef3-b043-417c42fbfaa6",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "6.0.16-tuxcare.8",
      "purl": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:10813204-0037-5671-b478-99f17795df1b",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57987417-44b3-573a-9e6d-c25396546b9f",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6434cc9-55fd-5aee-903d-1932f0e9f848",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afc4bb3b-69a7-5a02-ae21-cddd69d37460",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e770f988-b1dc-5f49-a797-c03593b6ee8f",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd8f2ed1-611d-5f4f-9d6a-48b840c490a5",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4449f42c-9243-5db2-9669-919b2004509d",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4dc31a88-6146-5fe2-9218-51d3bc2ca9d7",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01a9cb61-618f-561d-9fd0-10ccee04ca1a",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ed35843-ec96-5f75-a9c3-032901b8c70c",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec9a0d78-9adf-57ee-84fb-9de35b34fe99",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc0607e7-64c5-59dc-96ed-a1870cf31ebe",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff1a6015-69c2-5329-a0c6-1526006ccce5",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e79d41c2-dd12-5bb3-ab1b-e73862ab8e94",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:936e7fc9-b78a-5f72-b390-e623db7ed0d5",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1acc4c64-5338-50ea-8c81-8cb6159ac0ee",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70c66b9e-cf36-5ca3-8f7a-25a9a75b72d9",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b729f370-4d16-5b0b-96c1-eea317a05b71",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18b1c2aa-aa03-5b77-aece-5ba129bc1a9a",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:211fd946-e911-5f53-8a20-0e9bd0535f79",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ebd5757-9abf-5eb5-863c-571adf18f10c",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2dea061a-023a-5c6f-81f7-b6aeae03552a",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a645fac-f62f-5eba-b345-cecb744c0f85",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7a411a4-1b87-5851-b641-ba3e204e8f16",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fba984a-8e11-5b7d-b609-238c1714d819",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22ef82d1-3b7b-59ea-9728-8d6a973b62be",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee4427f9-0c18-5195-ae26-55dbf0edc1ea",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80b5f362-bd0d-544f-9534-61f36672820d",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e225b15-f92f-57f9-b205-5fdfef54e36d",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a57c044-bcb7-5a30-bf38-4d88fcae771f",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b9dbc3c-2254-5daa-ac75-80a7c9677f51",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:956e1334-482f-540a-9f5f-a6d750e58ee2",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b01e623-7807-5ef8-aab5-9380bef201aa",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7c26b2d-a44b-5e41-81d8-5907d53957e7",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5521fde-4777-5cb9-bd89-626c633e1fa1",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1399644-6ed1-545b-ab0b-88a60aec5e18",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19f1a5b4-7f7d-5193-9bf8-fed1a39dad88",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc50205d-880d-57a9-b9af-7d828dc3e1ec",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5eaca40e-80eb-59a6-80c1-9fb6f76b9406",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31cb6317-13c7-5e69-adc0-54239bfd107f",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ff97da6-3c7e-5162-a740-e830325ba525",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e85b80d2-cad3-5ca2-8cf8-531633167c11",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe51a885-9c40-5cfa-894c-e6034007197f",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:978a8fc5-25d5-52f6-a2b7-66fad0f50f63",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1dfa3fab-72b5-5d6b-808b-068f72849923",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d1a4665-0c55-50bc-a3f2-65fd33a8c4b7",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.8"
    }
  ]
}