{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ad9e5175-9ca2-5744-9cfa-1966e3466bda",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-orm",
      "purl": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4",
      "version": "6.2.13-tuxcare.4",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-orm",
            "purl": "pkg:maven/org.springframework/spring-orm@6.2.13",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.13"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d23ec5a6-99b6-5013-9189-bc60cf1f7219",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:10acf5a7-bf1b-5ad3-aaf1-d57a30ff4558",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:28bb4369-65c6-594d-aa0f-36d728c5ccbb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:990c830c-db8a-56a6-9ee0-6513cf726270",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:2f16ee44-db66-5855-8280-c04c90ce924b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:87e12850-40a3-51dc-ba29-3f4d00936f21",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:8ab1ea51-6617-503c-93ca-755b8ea15455",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:b11869d3-da84-5175-9b0d-7b91f728ab2a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:eaa1cbcc-c69d-5131-b987-30e38fda84f0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:46a02e22-237a-52d3-9615-c3008e8f1d21",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:763f51f7-fe76-5af1-85a6-5e5d29116b21",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d3ec4220-ae48-5ef8-b2dd-e06b924b3f81",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:152d18f3-cb07-5c34-a010-8c6e1a7d45e7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:4ebcbc96-2f80-5b3d-8902-1491759bd1f8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:482e5f90-9fc6-5890-88a4-00a7730b0e5a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:8317d194-b793-5c89-8fad-7ee924b7cbf5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1e92063c-d2de-5a56-bcc4-602eacdd1967",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ed650fa8-1d68-5bbf-bf69-93b48922aa92",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:6b0ca8c2-fe6a-5633-ae43-abd14ad8d192",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:4a969e15-9ac2-5866-bdd9-8f05c0b1cdf1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:cc51cb43-91f9-571e-9001-b7d0a898ee6b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:887c6eb9-2afc-5708-bf3d-de356c9bd2e5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:008fe592-c556-5e7f-8f35-6e4740f13145",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f262bfb8-8261-5472-9a46-d6e558301d1c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d8238d1a-0e19-5238-9b68-f8579e3576cd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:bab06903-b67d-5829-aa0c-aa35167ffe68",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e3101101-7963-5d51-9479-185e14b28fd1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:03f593ca-3082-5ffc-8b80-749ef5ca94ff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e7f21bad-637a-5cf8-acd2-69b9bfa17ab8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:278e299d-f189-52a8-ae0a-6de4d5d58d32",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d7db4076-5581-50da-bf4a-da25e6e9aafe",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:2fe61f78-d051-522f-9290-ac5b3f31cc4a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:6261784a-50c3-54bc-9c0f-4fcbc6120fe3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:115dedb8-fa0b-55a2-a516-c538286d2b94",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:90a7dfb7-f92e-5595-9335-06b1295ef09f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:962c4af6-5e43-51b8-bd74-05f1d524569b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7bca91f1-c7c2-565c-a3db-b4cb76cb17ed",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:5524d60a-2e07-514e-9642-c7c4ac69e656",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-orm."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.2.13-tuxcare.4"
    }
  ]
}