{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:18b07b0b-394e-5c2d-a1da-2b0198c4a7db",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-web",
      "version": "6.0.13-tuxcare.4",
      "purl": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:d2b16114-c382-5a71-9787-ae68583b1c1e",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d542a2ed-d9db-5a4d-9a22-dd4f8e5f23ef",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55e9705a-23cc-5121-8bf0-e20d36234c5c",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83a9236b-e53e-5fd0-8ab2-020406360fbb",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8b7bdbc-b2cf-5a3c-b7f8-6da79fbd7893",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4d39fa0-7f73-591f-a67a-e0bd17359ded",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3ac7540-9549-576e-8c0c-868b3c1c7254",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0d46bf0-e586-5681-8baf-92bea1b04fbe",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0f7a629-0a2f-57b5-aa71-c6d24eced120",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:563f707a-8a2f-54ad-9a2b-6857c33ad149",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c56dd71-38ec-5827-8494-fb60938e3d5f",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c0bc28f-1a79-5849-b8c1-1fc8f19b2f32",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5e28a49-da80-5e96-bf66-103cb38fca69",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:442c88bf-9364-5dd2-a64b-65db8c61eb75",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:838f3f4a-7004-5fb2-b369-9eb10474e574",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e1ec6b4-9669-5bf2-8b1e-acf93ce153b2",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:415363b0-93bb-5bd7-8934-c1ff6afdfb31",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2718858-fc4f-5925-89ba-ef9c77b28273",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4101123a-5718-5d30-a599-8777d82c2ddd",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07724fb0-4b9f-5f56-81a1-19559f431d08",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d65b6908-041e-50e4-9a78-fa147592e102",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea4cac7e-582b-58ae-811f-69ea0d52ff99",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dead76bb-9804-502b-8f09-14ce01718907",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc163328-55ee-5710-b2db-c701e51ec4d2",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca012bb4-e12d-5c67-834c-76f9a29fcded",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de151419-de8a-5676-9bba-f102c6ffbeb2",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b6c86b0-c7c6-5a52-bd61-1c02a0967985",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bcb9cce-dbf9-5ac1-b39a-e8d3c938c9f7",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb8b2d75-76a9-52c0-b121-2ebfa3b8faed",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38c13683-ec89-52b8-92bf-435ddcebdc70",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00501ab3-ddbd-5da9-a04c-e490dc1083a5",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86196175-93db-5761-b667-b570b6cf1a22",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57d1c1f8-99fd-5b17-b27a-40ba2ddebd62",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa8b3ba6-4957-5ca5-8560-5711175dbd63",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6139baa-4af8-5a9c-9e8f-81cd1c131e14",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c001f296-cca7-5f4f-a167-d05bccb1eefb",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3939e9f-94ba-57a9-bda9-ab65f869c26a",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c59a19b-9878-51db-b2aa-5850b058845f",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df60fce3-30cb-52a2-86f9-640751737782",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb4d2cd8-c9f3-535b-99db-c26a14151d85",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8df0598-9616-5bfd-ac13-b889fa6b1d14",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a481adf7-1495-5528-857a-da9c0f8bd84a",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bdcf11ba-b91d-53e7-859d-e7adec8fb51e",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6817d67e-43b8-5007-8b43-96b821901608",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f5ac118-218f-5f88-b5a8-f17259420666",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2eb79ec1-0117-50e2-88fa-618329916965",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a48e134a-3e1f-5534-9f0a-c1a78a2a59ba",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.13-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.0.13-tuxcare.4"
    }
  ]
}