{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1bbb6c2b-7d28-5e66-9013-a11980c31a08",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "6.0.23-tuxcare.7",
      "purl": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:fd8564ce-a726-5e5a-aa41-e84931dc6444",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9207b5c2-5724-5364-8020-20109915c0f4",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6b20a4d-5394-5818-87e7-89cd2ef67446",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f443883-b39f-5bae-bb4a-61f46d96a1b4",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7e18064-e797-5ede-8233-fd67adaff1a7",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89b361f7-4cf4-5a4d-bc93-b6ed21d6293c",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0875d091-f0bd-59c9-aab7-5b468baba1d8",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8b84da9-d927-52a1-925c-68f70581b39a",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62e1a4cd-d1e4-5b1d-8013-3bf8b9985230",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:384e6b9c-abff-5cb4-bd7a-5d2dc745bf47",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5abc1d83-1837-5463-8897-6b5f306f40aa",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbbbc4f4-ce79-57b4-b762-c9452b43926b",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3ae6dc7-a844-5c45-bac1-27c846612efc",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5cd4080b-fbe1-5193-b6b1-4f3c5f3e69fe",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc6fbda3-3e5d-5b6e-8ef2-d2b15b90d11c",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63f5892c-c6f4-52dd-80cd-e4edd086c599",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b564c1c-2cac-5dca-8472-199d734b5c8b",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bd4b632-a47a-56a0-937d-a1b8f9fe4b1d",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b12e988-b106-55d7-ae3d-7e7cbce52f5a",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff69581b-ea48-5c79-bc4a-492d757c183a",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a46b197-27b4-5439-aa92-1f439c5d1f15",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c22a029-5c79-58d2-b79c-df8b0f442570",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d73f21e0-d6ef-5c1c-9f16-b7e5a164c53c",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f1320fe-367b-5818-a5cc-8463a67c5049",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c90e36d4-5b83-55e3-8c41-9bd62d334e7f",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:588c7679-3322-542d-859a-538bdfe1b95e",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73286f97-6750-5044-b7d1-bd735c64e99f",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e47c282-8f7b-5855-9f36-c82e53c0ea9e",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:095c2663-10d7-5244-a792-7646b77f8926",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38c67ca3-45fc-5c99-81a5-f916176f8a99",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2210d411-4981-5893-9e94-ecba4633900d",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:121dc88d-a498-566f-b6d5-fc900f857715",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c023418-6b83-5e46-9595-b6f0765c54a4",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fe22bff-3996-5982-8bb2-0975dfa68ace",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:669adcc8-7018-545e-bb4f-1e0138f9cb5b",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0a29b1c-7088-5fb7-853f-484ddc4e5724",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e55c4e0-6be6-5743-a985-38cddf64108e",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bfa4200-a25a-52ff-baab-b024d6430359",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d87a87ca-9a43-5c0f-85ad-964b98b0e5dc",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b4869ce-ba5d-5aca-9dcf-8dea650cdac1",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2c0a297-9172-5f15-8395-ad563f1a2678",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4db2fe0-6d65-50d6-947e-fe754b71d101",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.23-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.7"
    }
  ]
}