{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:0dfb88e0-00c4-5ac4-95ec-6025c8a28abe",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "6.1.7-tuxcare.4",
      "purl": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:ab3f3ce4-1755-5f46-bb93-5e4170448cca",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dfd07c8b-5d7e-54e3-9399-7063458a3a34",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b1a7ed1-d519-52a2-b2ce-7f3c7d10ff26",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af025c24-ac8f-5d08-b8c2-f89227fe4488",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55a8a69f-e09b-508d-a8b6-46ff09f544c3",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9a1e8e9-4525-5697-a377-67b5a9185f9a",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:182fba40-550b-5cfc-b05f-b230005e30e4",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:261d3316-57da-5f2b-9972-9f7a91f798d1",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5a0b613-f2f0-5a33-878f-a5ef13648d25",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f299a20c-4236-5551-b891-3738ed2051ab",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b4f9e91-8f64-5f55-a698-ccbe57965829",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4bef210d-c076-57eb-a2bd-755bbc8cb748",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:841dc875-d11b-52fa-93b9-7b74ead21e40",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5bc72ab4-2e8d-560b-9976-17f39466fccf",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40e6fd25-2e34-53e4-aeae-1f75149b2e08",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e9102a3-de51-5c28-beee-74051820b1b5",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00095632-849e-5f88-af12-631dbb90c0d9",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67af6cf8-4ac0-5c8e-b253-14f7a6f9e2aa",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:acdecb33-aa64-55c2-bc5d-428833b1759c",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35e94adb-c2db-5849-8275-ef3d44066d2e",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d27bb19b-c9fa-509e-8970-9880d850dc26",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45946f50-e1d3-5801-a9a2-9f8f5dedd18f",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f656bccd-ec05-5e19-8ad3-d9f8c4349dd7",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ca71b6d-d351-533b-92be-c05488b4447b",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25bff209-82c8-5cd4-913c-3e329c0c86a2",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ef3ec6f-6b57-515d-8a1f-2c65cd978fe9",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db0c6a78-2ee1-5832-9633-3476bb5190f7",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6226f533-08c0-542e-b2a0-cab5ea8f35de",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16490bb7-223b-5e79-abc9-733bd6900a76",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f038f9df-8684-526a-80f8-36142bf84c28",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7dc7ee1e-2dbc-5133-a1db-0102118592e9",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9db59d49-aa89-5033-8b36-b43b6dcaefc5",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:687987d7-5526-50a5-bc37-ec916fcfd8b8",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:341ad200-c85d-5ac4-866d-6db7d2f6ea95",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:454077ab-906d-5c4f-a18a-dfdf1f97f463",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fca2e6f4-e6e0-5ac4-af82-a85f8e2600b7",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:500ca475-0f90-5931-8fb5-3e99731c674f",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08e67bf9-f8dd-56c5-9b40-b2437c9c2ba0",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42eae808-b1a5-569c-b190-68f923dbab52",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfb4cbfe-38bd-5cb0-8fe5-444ae1a462e0",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4afe65c6-4b07-5904-b650-7fd357ead6ae",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0d0fcb4-5bbe-5bf3-8a78-aa43742b21f9",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4785af5b-be30-5ed0-9922-e84790ec00d0",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a15e958e-59e9-55f8-be36-dcec6af730cb",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.4"
    }
  ]
}