{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:05a39ccc-f000-5b38-8371-74fb18211384",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "6.1.4-tuxcare.3",
      "purl": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:2a3252c7-bf0d-5da2-ae1c-461cf7f612b0",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1d3c0a7-4833-5933-ab09-c28f130e6d15",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a21b326-6a99-5c9f-8a43-380829ff8fd1",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d22333da-3e55-5b7f-a880-588ed866db26",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c193f46c-7cbb-5155-a2d8-fce488cce3dd",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38819 affects version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a747b33c-730f-5a7a-b395-3120987f6fa9",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ee150f6-0e31-5101-b24a-630ab41791fa",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6882f442-ce6b-5d17-9d46-80028e83525e",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26d63e81-9b0b-571d-b46c-cfea26df364a",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f72ccd8-14e7-5c13-a615-75c1cb24a4ed",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5769dead-353c-5007-b59b-d2f4ce406c56",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fbbe6311-ee42-5e82-98d8-c6cd08147a72",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b755001-b944-5715-bb4b-c3ee7ca409d6",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01434877-e44f-590c-80ef-6474d88aea66",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce1d30d3-a0a8-51aa-8950-a273293cd9fc",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94e15305-575f-5a05-8c4f-a34fa3dacbc7",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d4fae0a-ef90-5e11-b111-67c47201ebf7",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29dd5b5d-a62a-58ff-be0c-4477e469d3db",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb27df65-2834-5667-9dec-99257386383f",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79eb4f76-406f-5e27-937a-22d904ee1af3",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9215b293-fbac-59d6-973a-22cc775199c8",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79a0bc50-d253-5987-b263-31eba2865b3b",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2a22061-2ea9-50e6-aba9-c33c2007a3da",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4f1c34e-ae24-5fde-bfd5-c00084b3de70",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b3db50d-f796-5371-a128-e8e6bfca098a",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cb7490d-df3c-5388-a46a-d6c2f3593996",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe0bf098-5901-560c-a00c-02d9c412c886",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0939e09-eb5f-5edb-b0e4-34f0431aa55b",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54743e91-c1f2-5526-a56a-db555295826f",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:032ff92f-bd8e-5bd5-b030-0b4da9bf11c7",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fd0ee7c-f66b-5b03-a4ee-9ca89676ed34",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8cba423-dfc9-5508-9120-1ad715af6c17",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:033b663f-9f67-5948-a284-db6ceb4c7ae9",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04d28247-b3a8-5b49-852d-0b5473b9adba",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9391874d-da70-5062-b8f2-65a7d33a3a5c",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b25d7378-73ed-5c94-a6af-779ee4008474",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb042fa0-87b2-5dc1-a971-ba93ca012680",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42924370-c658-573a-bc0d-4363688d5c85",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72c151ae-f474-5a08-bcc0-cb7f3a0c1e37",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c02d95db-9799-5e52-a28f-b5bf0e288488",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6fd5bf5-b3d2-51b3-984c-3d8a6c7a1150",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9a14eda-d88f-57a9-b59c-becaa598068e",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d06eb55d-3f81-5b2c-ba49-deca0e2bf5a5",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2ca6a3c-13c9-5d4a-bb8f-610b546d5dd5",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a27c3822-9937-57a3-963c-975ff41283ee",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5230793-fb02-5f51-aa00-8c93912f4eca",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.3"
    }
  ]
}