{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:3983acf7-a975-5c66-ba39-902c8dc5f954",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-web",
      "version": "6.0.13-tuxcare.2",
      "purl": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:8ef6c3a1-cf5b-50ca-9c28-cfd9bdcb96c2",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:735ce857-6e6f-51f0-a342-113c5621a030",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f258f092-c324-52dc-b229-d3f759fe5d82",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74494142-5add-57ea-a98d-10f2a83698b2",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:237bb1c6-155a-5cec-bc12-f500987ffb41",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95203ec1-7a4c-5312-8591-e0e058bf7d7e",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c827c46-1aad-5c29-b53b-5e36d7b13ca0",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0f4a7b4-49b9-53c4-baf2-38e9d686d139",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73101fd2-84ce-57ce-b4cd-61912d2f8d1c",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3921764b-e595-5cd8-a816-aba8b736b769",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29d52bc8-7840-5017-8378-d65689753a10",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76df2782-0ffd-5fec-922b-b09d1cdb8093",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2fa4997-97d2-5890-b292-5e17c772e372",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cad775ba-d91d-5096-99c3-036ab755ebe4",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f79bd1a0-a3ef-5195-b4de-0b0b96f5c580",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0ce8947-4048-595e-a1f9-eeccef203cba",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0676ba83-36bf-58f3-8569-dae72bbdb35b",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03079418-ac7a-54d8-8959-e82da1e5c921",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f299539a-abd6-55c4-a63a-4e1363576f25",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07222fae-4f7f-53c0-a852-9553ce68fc68",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34e46dbc-a68b-5660-af9e-ccd451cb6a1e",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2042462-874d-50c0-b779-0576212d8cab",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:289f0213-3934-5ff0-a701-a4dd8e829af5",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1fd25f9f-52b4-5678-8404-0e07ee046243",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49e6951d-945b-51ba-89db-b10a08a61907",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1916432-8d30-57d0-bd9f-c310d044fc8c",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0bd5fb0-45e1-52f7-9b2a-c96103a565e3",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:faff17b9-f708-539b-a767-c07a3a69842f",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed67ef69-49c8-56e6-8a38-619ccf42ad37",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad9e818e-ec72-5149-b092-12be256a5369",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8a2ae99-913d-5a74-8602-8fa135f43f7a",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bdce58c-3505-5511-8ac5-fc349ed9d578",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:066a03b9-af3b-55c1-948f-52850cc9af57",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6c7345a-d8b4-50a5-872e-63c7f9f23049",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae17e0dc-c763-5268-a1e3-131235c3a112",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7938fcd-80ad-59e0-8b7a-cf246fb6fac7",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7faccdb7-0f83-5192-9b83-19e038fa1add",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0a62ad3-591c-58b7-9bbb-06a609dbe153",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b0667a9-cf0c-5184-a6ea-ec06aedb0d84",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8c47eb5-0193-53bf-8ceb-b322ffdeb777",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab24773e-6e7e-5809-941e-69c2235e8455",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c106c5c5-dd4c-58c7-9421-22816add4a6a",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e0620e6-c051-5c89-acd6-fae9602053a1",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8e2cd23-c6ca-55e5-851f-19c786a13513",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f85ee649-7b84-597f-b865-8ae31530a9c5",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6a88e40-f0d9-5002-8bcf-41296623d01d",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3bc03d3-a559-550a-a5da-205228a0fc7e",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.2"
    }
  ]
}