{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:016e720d-1773-5f1a-83db-024ce0473cc9",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "6.1.19-tuxcare.2",
      "purl": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:9d639398-7027-54fc-94fe-5c109354b9e6",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2279b48f-eb0f-552f-a470-bf91d8caab7c",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6ba18e1-5784-55df-8a8e-69dd35b26e72",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0188d71d-57f3-5035-9caa-aaeb09010db3",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc3b79c2-e1b1-576b-8ad1-3737a6539824",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dac546ac-f4a0-51b0-8ffe-5e4c4556828a",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb3d3b77-d0b3-54fe-917f-0925f912e996",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b54818d-8128-5e26-b7aa-26fdae7622e0",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad3d7f56-4968-5596-9ed5-717993dbe661",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8499319-f648-5ab1-8b4a-0cfcc51d0521",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fbc745cb-6663-5fdc-bc03-0a954057f22c",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5da01085-045d-51d2-a7ab-20341ff3eb5d",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:372302bf-f129-554a-9480-938767bb8711",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd0b7b79-103f-5d18-b197-c69650af9298",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ada85671-bd86-542b-81f8-17d6c1bf08e8",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96fd4ada-0926-5e5f-9837-1fa917187cfe",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02a70bed-1947-540e-85b8-84f4d33bbce8",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fce501c9-e5e4-5b7c-8d41-42cf0aa30239",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b46b9cad-c760-560f-b872-ee890764f66b",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d9e650f-3a15-5b2a-a1f2-5c093b05850f",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74ac4be1-a4a0-53ee-a254-42755aac3294",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23c072ec-bffc-5dd7-a25e-e1442aeaac57",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de52264f-17c0-53d7-a779-67b55191e9d0",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52d688b1-dcbe-5d7b-90a2-40c53b321467",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97663856-3698-5b9f-aba7-22123e33f9a4",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6826758-b2df-5947-bd47-2d024d06716c",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6d57807-419d-5ea0-bacd-2799903c7be2",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7540acc3-b52c-5d61-92f8-cd54e1f386cb",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47885 affects version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dfe3758a-ab32-5221-ac0e-e767a275534a",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:adcfe0fc-197a-5594-84fc-3a2cae1f8da3",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ffa41b3-8da1-584b-bb12-bf663cbd12e8",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20990080-5c69-509c-8cd0-c63c8bec5b6c",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0d93b1f-de51-50d7-bbdc-2f8f595ed909",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53b8120c-49ed-5dec-a4a6-e30862513475",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da9855c2-45d3-5d72-9983-d532a9c0415d",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f112bdce-3ef1-50f0-8a43-5c917f25bb69",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd918aad-2f13-58fe-a5b7-5e02ca8f1ae0",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:981b3403-3538-538f-9136-12cb0034a49c",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da745ea4-11fa-5202-b5d2-084e9f0e2992",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b0f60f7-1d6d-5207-b4d6-70ca3f0f437a",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 6.1.19-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.2"
    }
  ]
}