{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d394080f-63b8-529e-a327-c7f0917087a9",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-web",
      "version": "6.1.7-tuxcare.4",
      "purl": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:4f5934f3-9a34-5e18-b00c-d96a49e96430",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1197b60-6292-5268-a4c5-8e45ab849b54",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a066ed28-9836-5798-b43a-cb0b83788440",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a16f9240-b9d1-5008-a289-45c2baa9b4fd",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f27b81a5-7c2c-59c7-a8d0-ef127efdc51d",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8c67b7a-06f0-541c-afa9-f2855f7c0c4e",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06925bb5-02c6-51d5-8c19-197674686d5a",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2674989-9979-575b-91ac-23b1f34b89cd",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d364b8ec-0aff-5f5c-873f-246529a4d61e",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:addc9bbb-58a7-579b-9cda-fb2d89d6be43",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:563ae0d6-3edc-5315-bae5-e84bb217db85",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5b49bc7-a257-5383-82e6-31c374a5ce23",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a173c9c1-39b2-5652-ae62-7d52a5739c5c",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6fa5367-fb46-5976-a61b-da34db58ba23",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c8de640-b825-5b34-9105-18856ba988d8",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8e60ea6-5554-535c-965f-88f5f3874955",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73994392-86b4-5cb5-9938-74c91edb3c5c",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa818404-23b5-532a-bf6e-c3184f266378",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4d3ff28-75d7-5d59-9af4-9ccf1c481721",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8572c0a0-7b45-5895-9b6d-80f63466e668",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac713ca8-a98b-5812-b54c-89ec7eecf99a",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fdd4cbff-839f-5b47-a1f3-ebccc58e8e0b",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48ee5540-7f97-5d2a-ad79-32fae628cdbc",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b713cc9-5690-5fd7-82a9-71bf98d149a2",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25c7e06f-4e97-5bde-8c7f-af236ee54860",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a995fe3e-a39b-55b9-bedc-6432526df2ad",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04e74853-135c-58ae-b913-75ba1f4ada00",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc6fe694-fe22-52e9-ad06-f29255c8df64",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:440df23e-d2dc-52dd-9e9e-43e959a65d7d",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d5fead2-80de-5367-a13e-c46679ed2780",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37eafd69-425b-5eb3-9286-740a89ca5603",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:023465fe-36d1-5184-988d-974ca21c3a68",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:978a61c9-ba3d-5799-b5d3-94b99bfb73b4",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9c987b2-178f-54e7-917f-7bd28186a0a3",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ccf15dbc-488d-5497-84cf-61a666a39064",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0eb3e8e-5178-556b-8cd4-c50e3c71603d",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fff9ef5-2b59-5bec-8847-68109a64bbe1",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59b30957-e387-52f5-a032-7e29e195fc96",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:703448a5-e905-57bd-9266-ca8fb98151a7",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45145574-c0e4-5aa7-86d8-ff76003f76d6",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5dad5281-f541-5596-94f5-3937018ce809",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4858e533-42a5-5e36-86aa-806a57e84b72",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30b7e290-1c31-5d92-9587-8f23522bd29e",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a212c32-2b56-5632-a57f-865fedbde2d1",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.4"
    }
  ]
}