{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:07811233-7c87-52d5-b70a-00a83c2befda",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-web",
      "version": "6.0.16-tuxcare.7",
      "purl": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:9ac1f75b-36cc-5dd2-8216-3caed0c23bb4",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd8bfa6a-6465-5e62-8dd0-47b998021ae1",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1efd940f-e3cd-59f1-a207-6599f4b961be",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:077664fe-1dcc-56ac-a5a9-7b9e2800d130",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:965473e2-3176-568d-bc9b-56bd941b1010",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef22d20b-ed6d-5b6d-9fbe-8b5b0443202e",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1090782b-eefb-5708-acb4-c7b540e2fca9",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31603d99-a86f-52ad-a6d4-3689711b4e32",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e649339e-b080-5556-a066-bcb54b2d6694",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:972cf9fc-8785-5498-a3a1-84b4042071f2",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49b4ef4d-de8a-5df3-b1c0-cd3325e75802",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39a387fa-3cdc-5bb8-ad02-9f45f0387fa7",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:473d8d4c-99e4-5877-8172-809d1b2e4af9",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9c5466c-c64c-5e35-a060-1c06b78b1d9c",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47544d52-97b7-5f43-8e99-c6830fae56e3",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:581cb507-c9cb-58f1-84eb-5fad4cbc6dd5",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b831e2fb-1193-510d-9b79-406b43e0f721",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1d0dc53-3b8a-566a-b410-3a2b468c465b",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d33ab49-d8dd-5fd2-84e7-6fa739ce5a5e",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41929db5-16c4-54fe-8cde-9942b74743ae",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ed606f5-1128-5fe2-83fd-b8de4630d2ac",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8692887-84f5-5fc8-86de-77b5ee5d18c5",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a690ae03-ad77-50c9-9781-b410c01ee552",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df57a2d7-d760-5b2b-988f-9c1812a28553",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d051d28-df7c-5673-88eb-12998f6d1b59",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0145edc4-d6dc-5797-9925-7156c22410a0",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a6dd82b-937b-5ec6-9f2f-50d6c7fb42ea",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e392c390-0b25-597f-94fa-34b51e25edca",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78a4294d-a35f-5232-b93a-bc83fdb2931c",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a132d105-aa0d-5a16-915d-b1c03c712152",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8ba25d0-7eee-555d-9d42-65d68b00f831",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d40cdcdc-ae98-5fc9-bdb6-e75897ac19f6",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:decf6c3a-0da5-5166-b813-d32d4babcc2a",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2262a67-6a8d-5116-972d-0c416974a923",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1784059-414c-57ad-8eda-458cc27dce16",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b82a59e7-b824-508c-9791-fd8d4087843e",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b55c68ff-22fd-5d3f-ac74-6656e23a4f47",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73e07d3f-469a-5c66-af00-6582f6686c86",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:157b9e7f-fed4-573b-a5cb-5a5f066397f3",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76cdda7b-5698-546c-a83f-443b5653c473",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:234e268c-121d-5faa-986f-5c174f063807",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5270574-018a-5e1e-b40b-6835dcb9fc6d",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd4a14aa-e618-5617-83cb-3c6fbeb41a54",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79c0f2fc-1b61-5877-8332-5980924bf981",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4604a0a4-f60e-57fb-a774-fd004c494443",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed9ded7d-072f-50c2-9619-38382ebed3c7",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.16-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.7"
    }
  ]
}