{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:da986b33-1937-537c-b00a-b330dab8b0c9",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-web",
      "version": "6.1.4-tuxcare.2",
      "purl": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:88ac8c4b-7f0b-57df-aeb5-4a2123fbc0e5",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ecc34e4b-9cbb-5e87-bb21-6ffd9305108b",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66d0ac48-c963-5e01-8eef-9b5fc2a230af",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:daecbd7e-0673-50ef-8e25-6f35b362dcff",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca95e86e-83f8-5e22-881c-64ab6db25cd0",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38819 affects version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9fc4aa0a-3831-5d8a-8935-9e6e5036c0f2",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d06c0144-bc3f-53e2-a82e-13e997860f41",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdc2cbb8-7464-5033-83ec-72a615d4764b",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65305c96-b65f-56c4-a8ed-cab3d530db11",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a120d5ec-43c9-5d0b-a39e-5fccb7d11106",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:260872c2-6162-528f-a4a4-4b17763a1707",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6d60bf3-f2bd-5eba-8529-cabeba524b23",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b86f8496-be5b-5205-9737-6ecb260f4bc9",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e55b601d-adcf-5697-a8bc-404f24d9720c",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8e8373b-fed6-5c66-83fa-010935d75af1",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:000ab55d-b149-545b-b4b9-f8cc15f208b4",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df869a55-31b1-54a4-b01a-58c463eb37e0",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c752b957-ca7e-574f-a480-f7ef05669425",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:daa9cff9-face-5488-a2d2-a957b6e1317e",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bd27703-0354-504b-8c70-b59e216215ec",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:242d8aef-fb0e-5e9e-aae0-c20e1a4eb465",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2b80e00-26ed-50f7-892a-6e9fe85fbc8b",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:789c9d4c-b8c0-5cb6-a1d6-f51914a057f9",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc9bce8c-7f03-5613-80d5-8a219ec70316",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c667aaa9-8423-5118-8595-d58dbb1c92ba",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:325d4442-654a-54d7-918d-758203e19a26",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2b54f5e-aa65-55a6-9880-bad8e5db2c24",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:268086a9-eef7-5a67-92cb-be65f1ee2072",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a67170ec-ad83-5e0f-913d-8338a848027a",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c3f49c3-eba5-5540-8a9c-7c108cfddc58",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bc96e8c-258f-52b0-8d3a-ad41c853c831",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35c6febb-b7d1-5f3e-ad5e-3d0ba01a87bd",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45b21cca-5f48-5c87-8c8e-38668fe50502",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b59b513-8d68-5baa-89bb-29bdd5f12f15",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5447913-d911-52cd-99ab-297269be9aea",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a8f7b9e-7169-5a12-b622-371ffc51f23e",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b34cf3b1-89fb-5ca4-8951-c41e2d2cdde4",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95cc442c-9327-50f6-b766-7d68f140c46f",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2409840d-6f71-5e7d-935b-60abf280bbfa",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87591f27-a596-5a94-9dd8-c1db449c7e18",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b943256-8c12-512a-9c49-075914b2e2b1",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f0c7da5-377d-519a-bf75-79477beed81e",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2622d521-188e-524c-bd4f-d11cab4f76bc",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8e9ded9-c582-54e3-bd56-8fe6bb95d99e",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88d29a27-7ec9-501b-a845-1d0671f95375",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10d21a86-a114-550e-b122-46fbaf7b1e25",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.2"
    }
  ]
}