{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:091f0467-8165-5357-8157-3abf7604e56f",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-orm",
      "purl": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.13",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.13",
      "version": "6.1.20-tuxcare.13",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-orm",
            "purl": "pkg:maven/org.springframework/spring-orm@6.1.20",
            "type": "library",
            "group": "org.springframework",
            "version": "6.1.20"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.13"
        }
      ],
      "bom-ref": "urn:uuid:74b6ecd3-649c-544b-bfb3-72de1b2ea086",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 6.1.20-tuxcare.13 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.13"
        }
      ],
      "bom-ref": "urn:uuid:b3f50b15-705e-5560-8557-65d9b643cdb8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 6.1.20-tuxcare.13 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.13"
        }
      ],
      "bom-ref": "urn:uuid:a6bd3c47-4c0f-5b96-9097-f0efd9b0a277",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 6.1.20-tuxcare.13 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.13"
        }
      ],
      "bom-ref": "urn:uuid:e55e47fe-2a9e-56ee-873f-7b8723fef826",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 6.1.20-tuxcare.13 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.13"
        }
      ],
      "bom-ref": "urn:uuid:6f137501-37f3-5ca2-97cf-2663e42e9d77",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 6.1.20-tuxcare.13 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.13"
        }
      ],
      "bom-ref": "urn:uuid:10b42506-ade2-50ae-8b58-1e499ae833bc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 6.1.20-tuxcare.13 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.13"
        }
      ],
      "bom-ref": "urn:uuid:1e71ca8c-fdc8-5302-a223-564a787936f3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 6.1.20-tuxcare.13 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.13"
        }
      ],
      "bom-ref": "urn:uuid:f1243e59-4d04-5482-b0c9-aab86b5342cf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 6.1.20-tuxcare.13 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.13"
        }
      ],
      "bom-ref": "urn:uuid:0aa7d819-8df0-5090-ba56-fb8346b2115e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 6.1.20-tuxcare.13 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.13"
        }
      ],
      "bom-ref": "urn:uuid:a6e1085d-e47e-5c20-93f8-003ebecaf715",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 6.1.20-tuxcare.13 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.13"
        }
      ],
      "bom-ref": "urn:uuid:71de19b1-b4d3-547a-8a34-1b41aeef9087",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 6.1.20-tuxcare.13 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.13"
        }
      ],
      "bom-ref": "urn:uuid:623b9ceb-af60-5048-985a-dbe953158e5d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 6.1.20-tuxcare.13 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.13"
        }
      ],
      "bom-ref": "urn:uuid:2031b54f-692c-58f8-bb84-eb2eaf3175ac",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 6.1.20-tuxcare.13 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.13"
        }
      ],
      "bom-ref": "urn:uuid:4c43215e-f450-5be6-8322-08b667f244a3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 6.1.20-tuxcare.13 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.13"
        }
      ],
      "bom-ref": "urn:uuid:6deb3b09-9692-5bd1-bf9f-1886373cd0ab",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 6.1.20-tuxcare.13 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.13"
        }
      ],
      "bom-ref": "urn:uuid:262135dc-8f8c-58e4-ae44-3ba93fcab1d0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 6.1.20-tuxcare.13 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.13"
        }
      ],
      "bom-ref": "urn:uuid:ff018584-ecc3-5a8e-9404-305d7cc35e87",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22965 affects version 6.1.20-tuxcare.13 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.13"
        }
      ],
      "bom-ref": "urn:uuid:35c78afd-1b11-5041-a3bc-85121236d826",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 6.1.20-tuxcare.13 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.13"
        }
      ],
      "bom-ref": "urn:uuid:d23002bf-8ee3-576d-a584-de22a26d3943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 6.1.20-tuxcare.13 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.13"
        }
      ],
      "bom-ref": "urn:uuid:f114df39-aa7b-56ed-b090-2b0bf0da88ab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.13 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.13"
        }
      ],
      "bom-ref": "urn:uuid:2f29201b-cef2-509b-a988-821cba241dae",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.13 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.13"
        }
      ],
      "bom-ref": "urn:uuid:a73f657b-221a-560d-90bb-8dd8ec546975",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.13 of org.springframework:spring-orm."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.13"
    }
  ]
}