{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:977587af-78be-5c47-be22-a6618a73cd82",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-web",
      "version": "6.0.16-tuxcare.6",
      "purl": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:add307c5-0c85-54c0-8afc-753e2d880bac",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6931ccc5-5911-5f36-a3cb-5e1099be04d1",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7804cb7-77c7-55f7-aec3-b431045b5f1e",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b32d351-1752-55b4-8c48-b08445dc06ce",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:784630f7-205f-53a4-9c2e-98948a2cb9af",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:209f8f87-d20d-5692-a1bb-010031848ee3",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab51374c-efd9-5bea-80d8-37b8683546be",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f255bd83-2b27-5ca0-b510-d083833f4241",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9180db40-1871-5956-8398-c26fe93a9143",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb921614-42be-5e62-882d-0ff11a596334",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ccfdbd7-2c44-59ce-a579-ed360c397b13",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98101637-1452-55f6-b454-b4a0b1872d82",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:620b03d5-4317-519e-b851-6246f8b0ab4a",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:234056e0-a71d-5ff4-902e-f41644fa79ba",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:272c8d82-3628-5b2f-a363-f2a35b2abdd3",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10d6abcc-abbf-5a42-9367-8533d2ef9473",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:979a8c1c-24a4-5890-87b5-44d0b3b4346d",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fefdd666-4658-51c5-bc3d-8ce40ccb726f",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68a833bf-d9b2-54ac-98c5-e69a2afcc95e",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba2be3b8-bd74-5887-9423-90131fdd312d",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6bf97d0a-a144-52e7-882f-57ed0b647cc0",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2183c66f-92f1-5dbb-8590-ca0165cb992f",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfe13ca8-3f19-5cb2-9465-31f5bf864ccd",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ea6ab5b-f389-56bd-ad6b-2fff64a24c72",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55f2a381-f335-5e1e-92fa-0dbdeee18f8e",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c875a05-4ad3-576c-80b5-fd4d1ef32a13",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48b5f489-4f85-5cab-87e4-9bed7d8999ce",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2eb251f-0d85-5203-8c49-43b6dcc29bf3",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f5b4455-ce36-52ad-8eb4-806704d9e0af",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c45c44e4-289c-520d-9267-0a28cbc15fcb",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:914811b7-649e-59b9-a66f-4d7172891464",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76997377-ecc3-5a17-8a6b-f9ec16035a92",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8edaeb2-5682-5f58-a7df-b245a3111160",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed738c56-9120-567a-a16b-3aed95044d35",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9fdf82f0-fd2d-5834-8e91-709895cba3f1",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5dc3ed1-3713-5f61-970b-150fb66c506d",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec96a400-a3a1-59a1-b899-3d3a8c0ec980",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:733f48e6-856a-5ac0-8f99-67d5ab86f29e",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0eda4491-a787-5dd8-b040-2335605f9760",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0bfc9ba0-19a6-5b12-a47c-c882f0af1238",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae24b7f6-bf84-537b-9981-959e16f4bebf",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53a3032e-acbd-5a20-8449-2eb28fb8c2cd",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58dff21b-d1ca-5582-8057-a7b6ab9af8fc",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0efa7c18-f670-5401-bf53-e65c01f47659",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51cfd0e6-6381-53cc-8466-1fa875eb2a73",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80a58a16-e2a1-53e6-b5a1-ac241c803fb9",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.6"
    }
  ]
}