{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ec960ed6-cb27-50d9-a4ad-7885cb2d89bc",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-web",
      "version": "6.1.4-tuxcare.3",
      "purl": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:54344d3b-d2fe-5976-8e11-6ddc2d399886",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8bfa5b3-f4ef-51b8-a57a-f01347dff250",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:413408e1-8197-553d-a981-6b632146ed99",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ef3a2c5-85da-5ad0-92c2-67ea3c33ea8d",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50e4d0b9-4dc3-5ea9-a427-54e1b9f48c6d",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38819 affects version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf536bfc-1523-5498-b2af-2cd2b6afa894",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b6320b0-830d-562c-af1a-58140df1e7b9",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:178e9cab-ad04-573b-9de7-28101690734f",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4254e54-7b61-5932-9dd5-71d12544e84a",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0311b53-7b62-5ba3-88a5-fb1fce1530f7",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:233d5fd8-3ccd-55ee-9d45-f0982b9ffd22",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5813105-5211-5699-bfed-5a88100efbf4",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6c4eba0-2f4c-59b2-99c8-a471b729b3e0",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7cbbd722-2779-50a4-82e9-565cf17821f2",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:143f65fb-d107-52b6-9a0c-ccd634a200d4",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:880b0322-4727-54cd-b64e-f8959a3e0f51",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e63658c-b2c6-5c35-8d83-bd491cc44865",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a86665b0-14e3-59fb-b8a2-93ee2023680c",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e218496-4a96-518b-8d98-23ce5e220c7b",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b63486d9-e80a-56d7-8c3a-759d2f13c677",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b9eaffc-63d1-51c2-8212-dbb5b6ca5cd7",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a47c9b7-ede1-5523-bdd8-52704f58a34a",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c09a544-acca-515f-8184-154692d07eae",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6fd11241-efc2-5ab5-838b-1df340ae94dd",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db6f1b70-4080-5ba6-ba3e-264c65cdc556",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:427b9dbb-a02d-50f5-b67c-ed6f20e1f1ce",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa59c49a-2082-5b06-8ff4-558b8c087bf9",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c425650-9e02-554d-9020-e75a789835fd",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3184b298-58ff-50a3-9e79-b5acbaaa8c40",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fcaa1774-9d9f-5bca-96fe-8b9f3c0120b7",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dcf214f1-90da-5d65-92d9-ff56f25b9691",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:184b0467-5032-5f09-9677-47184a55d240",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bda39aca-5ead-5ebf-b86a-2585180ae9c3",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:138c2391-cf71-53fe-99f8-e7206094dee3",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c154af47-b132-5ed9-9ad9-7b5d6dcad443",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e28fda6d-17ac-5d1e-a933-f23ba4e16fc6",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ace7667a-d63f-52ab-a1d6-c77eb86ba37d",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7b43334-4e7f-5a96-8760-5cbadff11fd1",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:472a58ee-82b6-550e-93db-bfa695f9d738",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c629ce9-7350-5cda-a86c-cf479b89b4fb",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c8dad99-1314-5819-92f9-e2ffba99696a",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26ea406a-02ba-5f58-8547-b0244d157b86",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3affa38-03ad-5ab7-9148-4717fee678d5",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:520eeccb-e8ed-57d1-8ba4-d84e336e7baf",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a21d8228-1765-5bef-9177-39854f012feb",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb4c79aa-1ee6-5366-9cae-d89ae836dfa8",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.3"
    }
  ]
}