{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c0a193ac-fa21-58d0-b05e-73fc36b43ea9",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-webmvc",
      "version": "6.1.21-tuxcare.11",
      "purl": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:dca34894-d79c-51d4-bca3-3bff0c28dff6",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0568b46e-809e-57c3-be2c-c362e38c2f9c",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b98cdf3-116f-519d-ab10-ca438ab5da73",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6144725e-ba52-5856-b50a-7eda5fdb9e72",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a48043cf-506a-5da3-91e3-dbbadf5f8a02",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b36dc51-a464-5d14-b7e7-7c90f54e288e",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbb5e9de-59a6-5e90-856e-5acaa1231e59",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d1203d8-bd0c-57e8-84f6-d7ae2bbb2278",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c091e18e-71a0-5542-a41b-0a4f9267a610",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5475dd97-3733-5036-bc78-dbe7ba3a11d5",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea202df2-62fc-5434-bde1-2ebd65ce0d75",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be78e9b2-3d36-50ca-8000-ffd45d015dd6",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:781bc006-6e0c-504e-b50d-02def0e1176e",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de7bcc8f-c8c3-5d3c-871c-3691b561a026",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24401593-d469-5f2f-a585-ea3be75f245d",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71440eb6-2808-5f0f-aac2-f3e4f7b54522",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0162509f-d57c-5aa9-9e15-5fa02c6c201f",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45b75966-e473-5a45-b194-0df47b9cf9e3",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df5cb519-0d98-52f2-93a7-f9aa09ae8c62",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa830168-1785-5a1f-bfe5-514bdeb4aec2",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22fd2525-8283-571a-a1fd-ca11cc66416c",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56b08f99-d045-502f-9156-76ae32abe867",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66a206ac-420f-5104-ba0c-5449c31bbc38",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dee0c61e-23d2-5cb8-afa7-7705af73f345",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7ad808b-b0ec-52bc-90b3-1c862b02d5e6",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc4e794b-e9ec-5b2d-bb02-94b5675db662",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b02d70db-7391-5e1b-bb2e-e8bb5795dbc0",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b6541ec-6095-597e-983c-997a4d5fc7d1",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1833ac1-1c52-5d01-a936-d723d88570b6",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c4afa9c-5c7f-56fb-bde9-af82f077959e",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f753b08-23bc-5dec-8caa-e7929c3458a7",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71d10bb8-79d1-550d-a0c2-74f5b7b2efc2",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d6a1cf8-b54f-5fa3-b3f6-53a8fc9568e6",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a699470-e6f6-5743-a876-f032e38772a9",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4bf37aa4-0566-596e-a519-5fa5c336f908",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e11fcc1c-deda-5300-8147-9e05d0975e40",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:716e90ee-af30-5461-a52a-c2ac7a192df5",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea4a83ad-d6d9-576f-a286-daab00deef1a",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e0289dc-e469-59ca-80ae-045713381bf6",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-webmvc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.11"
    }
  ]
}