{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:3f1405fd-edf6-5e66-84e9-f5a1081b873a",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-web",
      "version": "6.1.16-tuxcare.3",
      "purl": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:2cda6a1e-807e-58b1-ac79-dfd1661fb30e",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c866570c-3db0-5806-b27d-b247e7638c6e",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b377464-e887-5b93-8547-2f9b0522b6c1",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9ac91a7-497d-5c40-a017-d0467d6b94e1",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:124381e8-aa3f-5fd8-a565-6dc66fad0af7",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a97b06b3-0fb9-5cde-97b8-1ca2514957c8",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:946c15f8-c789-5055-af32-d73e40a5b6b7",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed7bf97c-7343-5e0a-bae6-621605cee8e8",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fafab736-1ba3-504f-9b72-4bc4d6b0501a",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdc2993a-5cba-56f4-9160-4ba5d7a75334",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e6d2e58-457d-587b-b5c0-06bb341276ed",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4442d5e3-2882-513a-a1c0-04b36394483d",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2df4aa72-34ad-5fd5-b687-24485e401cca",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9a0432e-090b-58e6-ad0d-b3a608c123f8",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c66bccb-8346-5840-ab9e-3ac6a36861a3",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8618a5bc-f2af-5eff-b806-746ecebaed83",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8159e46-aae1-533f-af8b-4227907e492a",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a87e8920-66cb-582a-ba45-bc87746dc1b2",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69f5ba23-be80-5e80-8c08-9d37de427c51",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e91dc84-dd02-5948-8249-bd98609f993d",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa81866d-4c75-5a3c-8038-f12c527c179a",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94368f19-aca3-5d99-9d8e-adffe96d979c",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0f76249-5374-57e9-ae31-34ea4d2f0b5c",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:724ec263-552d-5bb5-8e36-330d382b4528",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eebff51f-109c-50e9-ad86-986b890a6975",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:802ff28b-6071-54cd-b9f7-4492f9f28fb8",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41444569-8379-595e-903d-88e9ed974f28",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad5581bc-16ef-501f-8b0d-03807007efab",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a4a635b-b725-56f8-9712-bc6a6df031e1",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ceec497a-1334-594f-bd1d-05b410804f49",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb28e321-d3e0-5467-b63f-ae2c92cdd033",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c534131-d698-5627-8b71-7f5311202db9",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:163b0b25-37b5-5006-ab3d-7725616ec6d7",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48c7dd5d-7628-5844-9344-b8850f256562",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f09c653-a959-5525-9c64-26fcd3b42b25",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1df09256-d311-5ed7-831e-8a99509fd5bf",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44608b40-7c8a-5452-9443-90b43457cdcc",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8eb31c49-f9e6-5e08-a9e0-658c72ede5de",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d349de16-23f4-54a9-9817-4e462bfeea23",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5699ff75-cc1f-581b-b94e-43a964f4275b",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.3"
    }
  ]
}