{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5735f332-81b3-5c20-a2e7-e0ac24ca334a",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-r2dbc",
      "version": "6.1.21-tuxcare.12",
      "purl": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:c98fab49-54e8-56e8-b765-fc996c2d3520",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f36d9a2e-7e28-5458-98d4-cfaf2a2c2480",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dbb58a8b-fd80-5053-b3e8-ec936d6fe8ee",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:617b7acd-9b60-5327-8e0c-1b119ad96cd9",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87fe1017-3f23-58f0-909f-90ce894df79c",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7903fce3-c552-5dd4-a92a-02cc3778cc65",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4b6d595-0233-5f84-9212-3e93357b0ec1",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d350f54-15df-5dbe-9e6a-09a94d7f709f",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e06298e1-43b7-5870-ad8e-1caa511edb92",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a199216a-9103-5b4f-bd2c-c5bd5e909bf5",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3eed1dd5-f234-596e-8477-9ed0c9547ee3",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6aa53aea-1ad3-53cb-a618-f3e7c16c4cfa",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a804329-7e59-5bfa-8d1c-1e5468e1ac5a",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84d85696-bb2f-5099-9a5d-ee953b538d7b",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd5b2ffc-0d79-5103-ae89-6911115a33cb",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3337b2d6-c02c-5c45-adaf-12d378ff375a",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44937ebb-6b1c-5e92-b1d4-11163fb0eaff",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:798fb3cb-43b1-555a-b95c-4918137975b2",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f057197a-de46-5878-8092-53df8ee7ba34",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fbc759ab-8e7b-54cc-bd5c-5d21a28b3b32",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9f7e376-5b31-59eb-9510-784798af0b20",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe22e3d4-6a45-5e70-a56f-526f04219dd1",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27000c52-21fa-5f6b-b8cc-131984f725b4",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c06a9cc-eb99-51ac-8047-ea7b0cf0ad76",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f5779b3-905e-5ee4-9c42-aed5454f25fc",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f737e79b-52b9-59cf-a4ed-23fa52c78094",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:472492f2-edd7-5900-9098-02812c183d53",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fef8c90-1e30-55b0-a7bd-afe98fd04d80",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d11617a-2b3d-54d5-96ef-9afbdb6bda48",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5cdaebcb-81ce-5932-94c3-ace6eb1a7e05",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08c984c5-3562-5c5c-b2e2-be652a52a411",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afeeaab3-0c14-53d9-a2f0-17028796294b",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a866292c-9963-5efa-8b19-87a2d2aedc13",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7aab898-3051-5ef6-872d-cd8e279285cf",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c47a1316-27c7-5de1-8872-a15df2b1a54c",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba1df9ab-568e-535e-877f-1d240ba3e903",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbf81086-33ea-5471-acc7-9ef114147c8c",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15fccb61-d43b-50e5-917f-bd672699b60b",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2fb574d-8d96-5743-a5bf-c8143e9894d3",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.21-tuxcare.12"
    }
  ]
}