{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:dcda28fb-9aca-5184-956b-aee6111e10ea",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-oxm",
      "version": "6.0.12-tuxcare.4",
      "purl": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:4185454b-74f5-5617-9965-c6cff885e1b0",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00b4f949-8e15-583e-805c-f86bb954410a",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0dbcb16-4230-5a0e-ba9c-5304556e1b4b",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cab55775-b4db-525a-8a1b-674f5134ceaa",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:995a6b52-2de9-5b6b-9d3e-e5486a801ce2",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:192ca305-8560-56ff-9055-42c20091f224",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f02ecfc6-59f4-5bdc-9c1e-6498f0926c65",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6532b24-6be1-5818-bea7-591a67a3fd0f",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e46fc582-54f5-5a5d-92d4-0fc0f81d8020",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0bc18eba-acb7-5462-a991-4b65727aa237",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bba4fcb3-3729-5e05-a9be-c55286bce4aa",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1551c5c-cdfe-5746-8d13-9db90cc9f251",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a96f1a21-6d27-51e0-9c4b-a03d65f444bb",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d6be4ac-b645-5324-a73d-ef9bd7ba3385",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f3cfd1b-8cf6-50d5-817a-12b9ce73167b",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79173291-62b8-556b-8fce-244a2041c140",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2a47fdb-1bf4-5cf8-b599-7d58cc397cff",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8424e493-b71a-5229-a8de-1ce7711bde08",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7abbedc0-b38b-50dd-a487-584d18aef3a5",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:312b5a25-d7ab-59c6-a683-72490fa5275e",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41839 does not affect version 6.0.12-tuxcare.4 of org.springframework:spring-oxm. Current version of spring-framework is not affected by CVE-2026-41839 according to the vendor - https://spring.io/security/cve-2026-41839"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ba84531-8b4b-56e9-932d-566f9a8143f0",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:abd51557-6661-532d-9f27-13bbf0cca3ca",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a13056d-4649-5638-8824-f21905c85309",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07498df5-aea3-5ce5-b957-5df7a7bb7c90",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d28465ad-a344-5f87-8e95-02f43916e27c",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f1f933b-6ca9-59e4-bd6e-b40b85a33f9b",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a74855ca-781a-5dc0-a2ac-d1dcc02687e4",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c258fa7-1bdb-5c0a-82a3-e152bda27f32",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:697547d2-e27b-58d7-918b-f837607cae6c",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40344742-3460-5642-be3f-8e4cc15d9fd4",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f7f2dc1-a1f4-5f92-97b9-8db896864727",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5195a5c7-92f4-5a7e-b515-b5c515d01298",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa5e694a-f53f-5005-b96e-0955101deb09",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54728e3c-ac9b-511f-8030-391eede3c127",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:034921e5-78a0-574f-a7bb-0a2b2f69b5df",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c608b9d-9144-57c1-8771-1c2941c77c1a",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe9d3c75-248b-51fd-a0a8-6c63ba59610a",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f05b0a83-7e7d-57fe-84da-a6a1209d7eca",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:174f4e2c-6d01-5d76-9e29-0ecf75185cb0",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7376719-0954-5b13-9905-475fd2006d93",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9896c87-2847-5b67-93e0-09eee9df9865",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:446daa0a-f277-5e78-b0b6-fcebb31a1664",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72b61ed2-a2f9-552d-a300-88ff227e1796",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e3793ca-39af-5b12-a652-fde998d4f848",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c3b7985-faf7-5a00-8515-f3d1714cd59b",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51834985-75a5-528a-9099-53965a123370",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed656aba-544a-5c28-918e-e4c793e4e29d",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-oxm@6.0.12-tuxcare.4"
    }
  ]
}