{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b2c63bb2-3f97-50be-bfb8-eca81dca37f1",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-web",
      "version": "6.0.13-tuxcare.1",
      "purl": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:4f520fd3-ef3c-57d2-949e-b06cb4b1937b",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74ca51e8-20a1-5851-9874-2f24e870b1e6",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b0c679d-f878-57b4-b38e-71c65048761e",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11d56ef7-ace5-59a8-a7c1-efac5b36db79",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f1414ed-e76a-54e1-b13f-d14945f94462",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc21ca05-123d-50f1-9885-9416ac470a01",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b5041a8-3941-538b-b254-e53b42ad9564",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09751ca8-aeb0-57dc-8a6d-c127161a02be",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb0002b4-692a-5f79-abb7-5304ddccce28",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fa8ec4b-490a-5e2a-bac9-91fde6630483",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01ff9f85-12cd-5ad9-8c42-3e9a36fc5696",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9654c00-fb37-5dba-b8de-475941170758",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea69dded-6ed4-5ca2-ab2a-5e31c2e47388",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19559917-673f-55f1-867b-bfa1229440f1",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1af8a92-8ff8-5a9a-84ae-2ae0913be762",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1b12878-059e-5b9b-8dc5-d7cce4939f3b",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3aaa004-1153-55b3-9944-d697e5e992da",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90104eae-adb3-5941-b99a-877a152292a5",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3231594d-34c1-59c2-b96d-bda5c3c70a70",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fdbeff9-42c1-5598-91ff-7bb07e8fcd1f",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:777610a3-c849-517a-bc56-25d2591ddcbc",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:980292b9-ff40-5b47-985d-ca77b75fd177",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d2e93c3-08d1-52e9-b591-e5aa56ff3913",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d8a0f60-3e29-5d51-aa84-5fafe3c46119",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:514d8fc7-8951-5568-b281-813fee04c50d",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5cd77fbe-05f3-5f5f-99cf-5c899ec4290b",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24acb465-e6e5-54ff-90f8-25d908c4bebd",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e57385f-ec76-51fd-a1a5-8d30c084a60b",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9654434-0118-550e-b6fb-72a752666e0e",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ecd6bb55-3aea-5e9e-98d5-33df68711027",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8f29c54-b438-5301-90ad-b5492e2b82cf",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e897847-3805-58f7-bdb1-daf4a8b4d53b",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06fd58e9-249e-54fe-a624-95300825b939",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5d92112-b3ea-5825-8961-b0fc78b781af",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2b4ff7b-41dc-5551-bce5-ff9e01a1c9b7",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe15af01-4ca8-5eeb-8e13-02147f71b0ef",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9689963b-662c-5508-9a35-0352f161b426",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:baae1262-6982-5f03-bdfc-1c7a54d7b99a",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:842843d1-d9ce-5d93-8437-b068bfaf17d5",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6bcb660e-b2b7-520f-9dfc-2be244c2f582",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f905706-3a5d-5932-bc5c-6b9fa9003f22",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5dbb506d-d4c8-565f-aa97-98c2208ff1cf",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:504cc3aa-1f6e-5f1b-a4fd-2a290049013b",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5dd0e471-20e0-5861-a3c9-33df877dbf12",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2580514-4541-547d-8343-53674a0af341",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a396119-c958-5865-afe9-06fef5f40483",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23cf44a8-6a80-5876-8c88-3c470d0f8e48",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.1"
    }
  ]
}