{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:11903ec4-0430-5ea4-8734-0c8693f65bee",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "6.1.16-tuxcare.3",
      "purl": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:a9444f44-7780-53c3-a6ca-2c74564eabcf",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7251090-34a8-56dd-a055-528aeef86682",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e79092c-b101-56df-98b8-ec458964d4dc",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f71a59e3-cfe8-5069-a85c-6ec9b5cb3970",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3fd7c82-b9e8-5b69-8e2e-fa81f7caee18",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ae35f6b-8c13-5e6a-b0f1-ffdf17973b34",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f275a8e3-08f8-5ed2-8b16-cd054a2966ce",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a84ef4e-c3c7-53a2-b8e0-81ea076acb0b",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:461b1ce8-ff5d-59ac-bb10-78cd554e28b1",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f3ca051-f6c0-5fee-b695-46972795443a",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a13beb44-28bf-5063-bdc0-3b8824d9d36e",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7309bd73-fde5-5cb4-be38-5029a2797ef3",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:571ddce7-aa8a-5a6f-8952-7d87f076c6bc",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce5021bf-83b0-5cb8-bad3-0d128b82567c",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:550c3b25-4b1e-5b86-95aa-23c24a633f86",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a95bbd10-a122-511c-b3e1-abf392a957bd",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f710bbbb-ccd5-522b-9f23-84aba7377e7c",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07a2be94-d4ce-589f-a587-c121e20933ba",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f9bcd28-0eff-50e0-b487-d4cd11870def",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81f58e12-dd6b-5ac8-ae06-82a1d6bbe41d",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18396232-4ce6-5276-a14d-a59eeb2961ad",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9c2373d-3dcc-5425-a88b-c608bd898781",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8be760d4-e579-5f37-a9cd-c9880c9f8163",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ba934b8-f0c3-5cbe-9406-90fef894ab50",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62154912-3804-5c9b-83bf-c8f0da1bee65",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8176bbdf-187c-5a9d-b04a-0ea8bebfbf81",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ddf0d7c9-b615-5334-9407-d8f3f6b085b5",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:105c77ed-6fff-5ba6-b788-e23ddb305d83",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:479b86a7-7cf0-59ff-97ed-17abd7d8114f",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c0af4a3-ded3-5044-8b28-03ee76c59328",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2185f6f-4a76-5f44-8b07-b5e0c3afc59b",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f76b82a-d6e4-5f8e-8d04-4202b00bd19b",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0650ae39-5600-5ea6-8b5a-fcf284f87e6f",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f034de56-9214-524c-9941-8bc07f3181c1",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a61d4ce4-f926-5524-aa6f-960bc41c29bd",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b3688fe-fadc-5566-b39a-c742ba0d06ae",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:479543cd-12b2-5796-974c-e70d79d496c0",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42ab0661-6d44-5213-b6d6-2050ec891af6",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0bae1669-e817-58d7-a4bd-f7deee8e4fae",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60e6cbfb-f3a3-5170-87e3-f05daf59157e",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.1.16-tuxcare.3"
    }
  ]
}