{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b15d3419-111a-5dfe-b72e-83da2386cbd5",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-web",
      "version": "6.0.0-tuxcare.1",
      "purl": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:46cd4a2e-d891-528e-a194-4993fd762b12",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:976f9d4a-f7ac-501f-a9cf-948417faf24c",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a5f5014-c668-519a-9967-cf935ef37926",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e09ce160-0978-5d4d-bb92-472da964fd40",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c4c378d-d8dd-5249-bf9c-fff14e9d3357",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:510a8448-837e-59f8-9354-2b6d9f7065d4",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b532064a-b997-553c-a595-46d7dae4cc8c",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b87feb57-565b-500d-9b96-15fd464166dd",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c400033-93e2-5648-8bd4-a7c19b037dd8",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a052529b-f8f4-5d1e-8eae-c50ab568b3d5",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0509fff-ebdf-572f-91b9-2db898917ace",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cce18973-8026-517f-8bde-e550e751c2f9",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04990252-4eb7-50b3-bcff-614d73129cf3",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b310066-6204-570d-9812-317ce7684e99",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbcafb62-2942-55fb-9d52-29dd48f19853",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e65ff3d-c19b-5d48-8667-4046f5bd75bd",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b44dae57-335e-53e6-978e-07caa531768d",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e95fd04c-33fc-54c5-ba4a-8ac2e515efde",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eae0cadd-ac64-5de8-b1fa-dba6c45b6512",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44d606a1-5edd-5395-bedd-8f2c8ae2aa64",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0ff371f-26db-5aba-9826-a82d84b66dff",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08ef5e35-673b-5cfd-88f8-251b3adcfeeb",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3d6b3c8-54a2-52b4-9411-bbd4ba81cc4c",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97d8e5e9-dbd2-5abc-8006-142680170c36",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad3c35d3-185b-5c29-b189-c4fef8d22729",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8427023a-df2b-55ce-bf5a-24b50c5e2fc4",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4fcf9bd6-dc4b-55e2-bf07-a16f87defc9a",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:034e9495-8485-55e3-b9eb-0951243a0177",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa62fc43-d440-5268-805b-d5cc447af0d8",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:755dc96b-8ec2-5368-98cd-1649578b8f8c",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe33986d-3e5b-5710-814d-a1ba00b49c11",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48bb81ae-806d-55ab-936e-0685bf217e91",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c0e309a-1ac0-52a4-8e20-6b402520ea50",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9025deb-4436-5cad-9bb5-acb6c90b6779",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a8f69d2-bf35-53ca-81cc-82f34fc212d9",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f31b672-b2ff-5b51-a365-6938b6392b48",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d81aa2f-b03f-5460-ad0c-fc4f132ff177",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df18a0c5-44cb-5f44-a5ba-610c83ad7d60",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2db26c6c-31b0-5714-8da6-c4354ebdafab",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fac30541-7535-55ba-9277-de29a160d9c2",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4894c7c0-2b1c-5116-898b-7fda873a3c9b",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10e5b80d-2807-5b98-b425-67bb514026e2",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9bec2b7f-ddcf-556d-9a69-572396d40649",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dbc8be29-a167-57cc-b3f9-3d0ccf106695",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a81346a5-a510-5a19-aab7-4855cc5d4b22",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b34f3b10-eabe-5ed2-a190-f2dd0a578458",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fbbf540-c719-5dab-a2df-724accd18da2",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2eecedcd-ccf4-5495-8695-296b4d6fe5f1",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.1"
    }
  ]
}