{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5b1fc24d-7739-53ee-afe1-c05f4236710c",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-web",
      "version": "6.0.12-tuxcare.3",
      "purl": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:e227bdac-a905-501c-99ef-17aa8767443a",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cdefb00-2b4e-5772-a24b-2c24d81103a5",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8924b48-673f-5e08-9c53-1d54eb89f8ab",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab8b1625-131d-541a-af98-0ea3ba7f3799",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edbb418b-ca58-5310-913a-c980919aa65b",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c405e8c-c0af-5302-bb52-5d5765278feb",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:638428e7-9008-5c9d-85b2-8bfd2403259b",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3987fab1-100e-5ac3-9f08-9409ca513a6a",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05977345-58eb-5b14-8525-2ab73e2d6d31",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e84e03d-6fb2-5c92-ae4c-96705e3ee46c",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4df4c07a-6c6b-5f07-a47e-1af438ed203c",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f34c03c-e1e7-5307-9a74-5157b01211eb",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48bbe9f1-d6ed-52ec-984f-5c14c012f130",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfb62053-abe4-5fe1-aa6e-0adf9613f8cf",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4216aed4-6da4-5388-a46b-84b713ddf4e8",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58c5a3f9-e63e-5779-b391-3f4e90f14ade",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dccd96c4-1dba-5560-976e-695420cdb900",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15a4d4f8-f498-5e37-bc1f-82d04636c83b",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c0cd6d4-dcc4-5453-9c20-01bc761eb6ca",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55a74bde-e4a1-5f6d-9235-08f870ecb5f4",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41839 does not affect version 6.0.12-tuxcare.3 of org.springframework:spring-web. Current version of spring-framework is not affected by CVE-2026-41839 according to the vendor - https://spring.io/security/cve-2026-41839"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0298e967-df38-557f-8214-f1e18614eda1",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47be43f6-a9b9-586d-85a3-1e948c3ba1b0",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b755653f-1aa8-58e2-a2b5-af9bc96c978c",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c8de313-afde-5be2-88fa-ead562e66cf2",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b3739be-8fb3-59d7-abef-bf9125e99318",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3116aebb-792f-5943-b215-cda6ce5613da",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f9b444c-7c97-588d-8f95-dd4e3a98d089",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6315e8c-afa8-5984-8630-506b28750d5d",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34f08caa-4b2b-5cb9-9ded-997fc8f65d7c",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b83b94b7-4c47-5c95-85fd-1ed86de2b0dd",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67d26c84-6b94-5370-9a96-1de77efd5736",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8b62eeb-3e14-52f1-b742-62d691a447ee",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3456036c-5cc5-540a-ac4b-5b63028ac364",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14da0493-ff1a-56fd-b048-24f4cc37d29a",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:089787e8-f502-591d-a9ea-c02986a120d4",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dcd0d5ef-a5fe-5f84-be3b-b8a26fde587e",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ab6c86f-1f8e-5419-bb01-64ce528ff8fe",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:401cdb46-0a95-5726-8898-0ce38047c4c0",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2cf5302d-a91f-5ee6-9cce-134d965a6623",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01321f4f-fc85-5d44-aef8-7de995393549",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e59d001-b802-54b4-bdb3-25b4e2309a3d",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:788226b4-e89b-5441-84e8-72ed9504beaa",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17518064-700c-5496-89db-2a2059357df2",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:919aaa55-4f43-55f7-b748-a4f4e8ad365d",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0346bad4-6f70-51f7-89b9-d1fb822b69cc",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e34aa752-1316-5982-b12a-2d7453339c52",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15e1c347-2a29-569e-a555-6e4d3a908c7e",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.3"
    }
  ]
}