{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:3a6a3667-f6b7-5a29-b694-8aaad5273c09",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-web",
      "version": "6.0.11-tuxcare.4",
      "purl": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:3b251c44-41a6-5683-81ce-2108e5b9ecb0",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b26a0a44-f662-5385-9a7f-515160c0000c",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d89e14ee-5ec6-5dd1-993a-6e4fa53e5a24",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4de7565-4683-5498-b055-8931d1c72c76",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58e7736a-4aab-5d56-b76b-051bc3fb2dce",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85de03d3-34aa-5139-8496-52aa21f8b198",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80ac99af-4a62-51ab-ba6e-43a4efd09b85",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44d9811b-8942-5e64-bda0-a91f7ee0879e",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7660e5ec-a6f6-5dc3-a40f-4c5a4b4177ef",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7731119-4ead-52a8-be73-8a142ed9db30",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e9c608a-fcef-5602-888d-ee6e84ba6f69",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e72f05e3-406e-5a68-8051-60aa449b857a",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3e5784c-7659-5343-957a-0da565e76af4",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92e5690a-aab9-522e-891f-e6c217136027",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c941592e-f64a-51b8-87e6-364b1093f725",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3834865-7de8-5668-9d81-748da3ecf194",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd04d230-b074-595f-beb5-73fd9a5aacd5",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e440c95-89c2-52c7-869e-5c2aad48b69d",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93b257be-ea4f-5ace-8e8a-751bc69094d2",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eed9c315-a83a-55cc-a8ad-bf75f2a43a5d",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7136af3-e312-54b7-a1eb-ae31d3c6ee4f",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1aabeb3-8698-5934-9ffb-ba981ea5206f",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d19ea6c-cbf6-506d-8c5a-ed6b90895939",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41fe8845-8eaf-5cd5-a729-bffdfbf4c4e8",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da7ccdc3-1e04-5927-a2b9-7d7246bace97",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88812647-e279-5fec-b9df-856291dc7d4a",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c738073f-ce37-587d-9afc-1a531f796665",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb589dbf-175c-58df-bed6-af8cd8e82b92",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41b014a9-75bc-577b-946a-c086d61487eb",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87384d09-329e-53c8-83e1-31ec15ce46aa",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1884a339-5f63-5e10-a1b9-cd9a40028b4c",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2385a5d8-88f3-516d-b915-fb0bc81ad70a",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7434eb09-8dc4-5fae-b9d4-2564d51ad408",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37c4087b-4a09-5b0e-b70d-816fd8f4d8cc",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7f845b4-7733-5ec2-8258-74df3e895607",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:440db506-b8ee-5833-a4f6-aaaa54b11caf",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c3a47c0-ed9d-5f14-a163-0bdc4580f053",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3c6e951-826a-50f1-920b-fe35415830a6",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e74d470-502b-5cc5-8ad5-9571eeca3f55",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63537436-cce1-5eb2-aeb6-d9953a31fd91",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b30e70e1-8b51-5d3b-9dd3-c448ee5b0090",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f13ab994-43c3-577e-8642-cd6b4546563b",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c680143-a792-5f3b-b50c-51e71547c8a8",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96fa7176-86ed-5b4f-b01f-5c8a9701d5e7",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a8eae12-961a-5337-ba0f-8365e8995db8",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8fb13ab9-74fb-5c11-8e3f-1654dc5f583b",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1fe66f1d-ece8-5e58-a011-634904899b6b",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.4"
    }
  ]
}