{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:838c8016-2b2a-5e16-92d5-c9ad3b7905df",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-web",
      "version": "6.0.23-tuxcare.6",
      "purl": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:d3d97e30-5e3b-5305-bd1a-503ae2cad9b0",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a118c174-bdb1-5f1a-ba8d-3ae53997be21",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45b9f09b-23aa-55de-9bca-f084194fc4ee",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ecd2a294-fcdc-57d4-abf8-070b1e916d9e",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6997fab2-48d1-5754-8beb-302b7233f55e",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbdfd86f-cff7-5503-b078-c4c44b803e91",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80e279f9-3024-5138-bab0-caad42a96418",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7488c98-8da2-588b-b896-57178dbfb0ad",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a668fd5d-0421-5fca-b4d6-bd62d0a6619b",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57c01797-8f4f-5bea-beff-28ec29d1b7c1",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:450d0c03-a807-57db-8993-3bb35fa3df65",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:294643dc-1f42-579a-94f9-724b3d69124f",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c724b2d9-931f-5458-ab40-64d2bb877cc6",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0df72cf3-1846-5e46-b858-9c374b4fe587",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9eb2e026-6abe-5dfa-98ab-4354cb175330",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f28dd52c-25a3-5259-aeb1-88894f9927e2",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55930e77-0e92-56cd-a8f2-7367735d3199",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f25266f0-187c-53b4-b2c9-b469262df0c7",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8854f801-d755-5b8b-b11a-d1bef1b43afe",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:721be093-470b-582a-964c-7cf99996dfe5",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3a6e59d-73fc-5a11-a47b-44abb78dc9f2",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ec8aaec-4836-5f04-b63e-8f364c4e7132",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e10a0870-513b-5bcf-90ac-fb812d510faf",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cddcc3e3-747c-5163-9665-d92ef4721dfd",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ff036b4-d06e-5eea-8a04-23259f80c792",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:beab0b30-2bba-5a30-81b7-b86892b06fe5",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6396bb3-bee0-5ff7-99d6-6c0f47578b34",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9563d31-ae6c-56b5-927f-f61e6a1ab776",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80f03d99-b5f0-5ffc-904b-48e0476aee49",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b5accbf-7ab8-59ff-92f4-d68516bfed4e",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2255db2a-3532-5034-a26a-578853eee279",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e2d438f-4cd4-5e93-8cf2-2082c5a7d755",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:705f02b6-de66-5baf-bdff-4814df3305a6",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ba7cef1-b72f-5cee-9378-e87d9c052686",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d06981be-ed9f-56c2-ab0c-99adc087c898",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:102d7a08-7a6a-5a50-9d10-086592da210f",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8d09d80-8bd2-581a-97ea-050c95a331c2",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23045a7a-8eb5-5359-bf18-be97689317eb",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:049d6add-e25a-50f1-89b5-165596757c10",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5402babe-c521-5ede-bd38-cdce9781e43f",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6560a172-5699-5dbb-9fba-1dee8b6822e2",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 6.0.23-tuxcare.6 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.6"
    }
  ]
}