{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:873e76f2-a695-5c9e-a7db-7c241d3dcc1f",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-orm",
      "purl": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2",
      "version": "6.2.14-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-orm",
            "purl": "pkg:maven/org.springframework/spring-orm@6.2.14",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.14"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dbb89df6-be33-57d5-8940-9279ce29dcd2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dd0a19b7-6a57-5ed6-a01e-5c01c5ab4b5a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ed5a7f67-3610-5844-9322-112937a5fb62",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:23d6f303-2f74-55ea-bdea-0bf6b85cd185",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7c7e0389-97b6-5b66-9a5b-20ac86c2b6e5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dc1fc49f-9f00-52d0-b681-11a439398de3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ceb8c755-88cb-506a-9ffe-ef6047aa0667",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5c605e09-1c47-57e5-9211-2dfc8add7d5d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:22869a5b-72f7-5b69-963f-533666741f43",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d1f5aa66-ed4a-5812-8aa8-eb19eb1f5758",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dc60c345-0127-51a0-912f-99008623ed8f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a2904a6d-0b76-595f-99dc-30babbf8642e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2c204aea-73a3-5030-96e0-652ad9e00bbe",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:844ee084-264c-51e6-ae5e-360e624e9ecf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0ae175fe-c3e8-5424-92bb-c1e5b416f11c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:24b90aa2-ec98-50f9-a392-376756eb70bf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0ae77247-f05f-5374-a840-c5b8eb2049e7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e253fe8d-4722-5c46-8873-0d42dbdddc39",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1b9e0efa-f833-5fd4-aa8a-8bcfd17b338f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2c55a7e5-0565-56a3-b7f0-600bb383c03a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:832478c7-4c69-512a-a187-ffe760449700",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7cf33b54-ff03-5cb0-82c3-e0fa7b17a813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:10982a51-0045-5635-950d-e1b0e2ceb3de",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0448e35a-9476-5441-aba3-df2161f33579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:aff642a9-f678-57e0-aeb9-12a8447ce7ab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5d59f136-f57d-5384-a074-8adbf1da1f7b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2c21b860-afe2-564c-bc8f-9bc6ab4fa53c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f3472371-d211-5adc-a476-6ff309884564",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e602c076-d61a-55fe-b966-d2cf3066089f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bdba48fc-f946-518b-bc6a-ba1a35a390b8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3799d8e8-cfb4-511d-b98e-4b9734f6c669",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4ca455ef-3663-51a8-b3e4-29ce96c8e2e2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f81a6c7c-1284-5074-b9a3-f7e64fe783c9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5738b8fa-3705-5913-a47d-2f80e4015a36",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d701ad33-b502-5fc6-8077-c6392e2d77e8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b5b130df-3416-50be-865d-918466f5d5d6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c82883c0-e5ac-535d-8fea-dc71e6f80d52",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e1408b88-a3a1-5600-9484-f0ee71a94c5f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-orm."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.2"
    }
  ]
}