{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:8b318379-ecfb-528a-b54d-dbfc39613f98",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-oxm",
      "version": "6.1.21-tuxcare.12",
      "purl": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:423dc47b-bfbf-562b-bac6-d23eb8c27dbe",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.12 of org.springframework:spring-oxm. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29a981a5-71ad-5614-9658-72ce0cd221ca",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e960fe73-5ffb-5213-b6b8-98763686de0e",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d882469-2cf0-5fb3-893d-9f0e21c2d1bd",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:321ba103-9ddd-5f23-959f-391aaf09108e",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4af59262-66af-5bf7-847d-4e7df0cb3332",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f5b0f98-f50c-58bd-9e78-001acb709b5a",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6bcee48-c574-5bb0-b8b0-3daabf4517ec",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:128837f8-3348-5127-85dc-eb92585a7c16",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41b117e7-ac6b-5e46-ac5a-ee5301aadaf2",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7209a1f-d937-5444-a67e-14fe40c0421e",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48249874-0e0c-5423-bb47-067a27442981",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a348ee6-3d3d-59e8-84e3-922d874821c0",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aab4ceb6-64a2-5466-bec8-34fcfd58febf",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39bcbcb5-363b-565d-9a79-bd465dd0d302",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd5ba768-c600-5ea5-9173-ba7e719fada0",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f361b021-040c-5ced-9519-f1716f6367e3",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2d7e697-1310-5e06-bbcc-93d6771948e4",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f88b62a-3671-5c6a-929d-025307cb6ac4",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:139cdfd2-9061-5783-bc9f-cb54192e4a1d",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4503e80-ff20-500a-974b-b454b751abdf",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf81b0e1-b343-58ff-8c4d-273f9aa71a8e",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14395fbe-920e-5b4f-93ed-ace5a2cd3f7a",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ce8c3a8-d35f-5e03-8173-6577161bd082",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d737e2e2-093c-5afd-af7f-b8ae3a4cb534",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fce8d7cd-7a92-535b-b6a8-df38e90883cf",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72523c03-77a8-5e8d-bfe4-7fdb5380adfa",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3a31271-9e06-5f27-b734-3b11b1364cf9",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:876538e2-d83c-5f83-b076-097cd6482645",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8ffb18a-9a62-5a54-8531-270046d5d572",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:057da112-3468-5c43-bdb4-4e9b68dfd7fa",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbd692a7-0962-50f4-9efb-4550e4c76bc4",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:924e053a-4f6e-5d5f-88d0-8b421beee358",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13c5bf43-85ac-525f-a053-093edcb4b1ec",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f49165b4-53e3-5f23-b8f9-c8beb61fdd10",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:370683e3-b153-5af1-b9b6-ad9d69a6a704",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11130506-c75c-58e1-8855-6622edffaaf1",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:110c7f76-c5c0-5d39-a408-3fe3d8ce0fa6",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8743f873-3241-5619-bb0d-1fa4d4948c58",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.12"
    }
  ]
}