{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d203a914-1930-5f56-89d6-3163f75b8ab0",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-orm",
      "purl": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9",
      "version": "6.0.16-tuxcare.9",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-orm",
            "purl": "pkg:maven/org.springframework/spring-orm@6.0.16",
            "type": "library",
            "group": "org.springframework",
            "version": "6.0.16"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:a6d84e3d-74cb-5b98-a139-67bed453e6ea",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:225690c2-a172-5152-a55e-239393ff6d12",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:57776527-9ce5-58c0-9fa3-81fbeb5ebce0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:44ece401-3bd1-5d76-84dd-4cf2f6c95851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:a6812d9b-6b39-5e20-be07-7c2e613234c0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:99abfb8f-6e63-535e-8466-1ad7ce418290",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:4eee5607-0471-51ae-8341-fe1f980dadaa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:edf367f0-8b99-5e4c-be97-0c9115f84b1b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:72970e1f-b254-5ccb-b572-ba5a853346fa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:f55c0be8-1a14-59f6-ba2b-aef76544bf88",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:05c83b4d-e7b6-56c3-819d-81db647df469",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:6cda8216-a0e1-5186-9b3f-43e72637096c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:1bb8f723-69b3-507a-a305-bbe975351904",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:1c402293-4945-5121-99d7-73d1f91d5ca6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:d624977a-a84a-557c-87af-c83a83ea489e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:d576a330-32ed-5bad-ac8f-d89799dba460",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:d1d36d61-b3dd-5394-82a6-47f36eadbcce",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22965 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:feac12a4-6bc4-5082-b05e-ddecc80004a9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:37308cac-fed4-59b9-ab79-292b6ef712fc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:0c886634-ed61-51ef-84ec-e92e6dd02fc1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:db9775ce-0508-516a-b77b-0f353d79921d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm, and is fixed in 6.0.16-tuxcare.10."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:dabd8005-16af-52c1-a19e-039a684850b7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9"
    }
  ]
}