{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b6c6b563-0292-53fc-b673-f86b4a17a052",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-web",
      "version": "6.0.11-tuxcare.2",
      "purl": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:1d5c8739-b4cd-5507-b741-9bb0c13b8789",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c7fa922-f8b8-5712-97cb-545009b76dee",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:569b4108-29a2-5ce4-a642-fd36c57aa0aa",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc1c9e5e-0747-590a-9663-83c0089d6207",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e689a12-e20e-584f-8488-b765718f20da",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed1b1b6b-e78b-53eb-b3bd-0f330d3f8cb8",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f27c01b-6355-5a39-8e3b-a603d9e6d403",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8673566d-b093-557c-91b7-43baf963a2fa",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9bdd41f2-0b45-5f7a-9a90-b9e2aa24852d",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13c5c160-71e5-5f9a-989b-9c9a59a2c20a",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d29dcc1a-cd2f-5f86-8655-d4221f224b8e",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c7021c1-d02d-5aaa-9a57-5dfd9d7f6885",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0dbc38b-6dcf-56bf-ba86-85e74d1b7b82",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6619ba61-6058-58cd-b5d2-f237206f88f6",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f555bebf-7fbe-54ec-9fba-17460dc79815",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfe8f8c9-c541-51ea-82f4-b50260bb2464",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e8ac6d9-32a8-5add-82a2-f8fffaacd137",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4065f1dc-2568-543a-af15-977426730a7c",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23007b99-95a6-5afb-85ea-67d0bc04ba00",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e728c4d-288e-54a8-adc2-4a8f7e34618b",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a370ed8-2e4e-55de-b244-96f789e231e8",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78e34cad-f744-5387-9a61-7a4017da2337",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8246cd46-b81f-5b1a-8b52-f3a04fc6f66a",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b21e096-fcd6-5ebc-b2d4-c39ced3a27e8",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5dbfc42f-90d7-5fda-a8b9-ca50360897ba",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58cfd7b1-b603-51ad-9193-fdee51b753c2",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eba0b48b-e635-5e47-a41a-96864acc2873",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d6853ad-5d48-56a8-af46-375b74292e99",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e16568bf-650e-5c89-8629-af9868b1cfea",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86b27187-541b-5884-9124-b51fe430d2f5",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca693566-0d90-5947-b7ff-dba1ac9d7840",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c53a447-20fd-51a4-900c-b5e932c53de0",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47855634-ebf3-5d35-9a46-927199ab1516",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cb1e5e4-7620-5b66-985a-de47432887c7",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8e7f6ab-ed78-530f-97e3-9af79a56ccd5",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce8218ec-9c0c-579f-ba71-a3a1ac554421",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0cae51eb-4312-5826-8e09-8968d53ee13e",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:557bcc85-bee6-57ff-b309-8a65fe39e567",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40fb3b4a-0ecb-5ed6-abf1-dacf7da028c6",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8f6869b-db02-52a4-8555-186db58b2f72",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3ba46b0-2e4f-5b90-8d71-67ce7fd4b52c",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26acdcbb-a69a-577f-a0d8-489bc974759c",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a7eb053-3d21-549a-9b15-fb38ad5eaaba",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4c65158-843b-58ed-a44e-524fce4bb3f8",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:853c4cf3-9092-58f3-aa3b-9a776433ed29",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89c1d3b1-5209-52f3-861c-16c7a1778041",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5396988e-82d2-5987-8194-fd8f0d31a65d",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.2"
    }
  ]
}