{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:fbc37abf-49ca-5d35-b061-cebd2fa00509",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-tx",
      "purl": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE-tuxcare.5",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE-tuxcare.5",
      "version": "4.3.9.RELEASE-tuxcare.5",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-tx",
            "purl": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE",
            "type": "library",
            "group": "org.springframework",
            "version": "4.3.9.RELEASE"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:a8466fde-0a4d-525d-823c-e9115c906961",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:e9992597-1272-5c82-b0b2-1fb6085df30a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:051a6585-8680-5452-806d-5034a7943e5d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:21b664c6-c8cf-5d6a-a16d-1aa4f4d675f4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:81342a7f-f5a4-5659-a7cb-2fb796c03b55",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:bf4a31cf-8552-5db5-9518-2a23d46e5cf8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:fb131873-457a-5fcb-a320-8a0d5e084f04",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:d2b89695-958d-5190-9e45-7b4a3a23d4c9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2018-11040 is fixed in version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:fbca9f6a-a5f5-5a1c-8c5e-ed545023bc69",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:9673a84a-9a76-5b1c-9e6f-80c5f5d7667e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2018-1257 is fixed in version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:8dd909fe-25e1-5f11-a2b9-c6b84ca7216c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:80407a52-cd72-5c42-a006-fb82bfc0cd5e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2018-1271 is fixed in version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:917b62ef-30a6-5de1-9cf1-a1d065d79dd9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2018-1272 is fixed in version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:354fa705-4637-5d5e-8a9c-e9f678ed5bc7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2018-15756 is fixed in version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:c1723484-7ef0-508c-8b57-4f13f898146e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:f11153c8-143b-5fe1-8aaa-2fd660beaefa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:2aad15b4-db37-5dc1-be25-fcf9f5a9b1c1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22965 is fixed in version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:a544b25a-9c68-56ee-bdf2-40d432761285",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:3b1f6bb0-443c-5c42-88bf-cc10d03c8173",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:d44ad45f-884c-5789-a8fd-ca9bf196a215",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:78e3bac3-991a-5cd8-b4c1-3354afa3e3bc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:a9991af0-72ee-57e6-b495-c2e9f218f723",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 4.3.9.RELEASE-tuxcare.5 of org.springframework:spring-tx."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-tx@4.3.9.RELEASE-tuxcare.5"
    }
  ]
}