{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:46ac2191-f1fb-57dc-9e38-57322e10eb10",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.7.16-tuxcare.8",
      "type": "library",
      "group": "org.springframework.boot",
      "name": "org.springframework.boot.gradle.plugin",
      "version": "2.7.16-tuxcare.8",
      "purl": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.7.16-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:7e6024e6-1605-5cc5-b7dd-8889ad4ab793",
      "id": "CVE-2023-34055",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34055 is fixed in version 2.7.16-tuxcare.8 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.7.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8338febf-757c-50ea-b8b5-d83b5a35b7a9",
      "id": "CVE-2023-38286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-38286 affects version 2.7.16-tuxcare.8 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.7.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e43929f9-2058-5d2d-b1f1-4364f0215d30",
      "id": "CVE-2024-38807",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38807 is fixed in version 2.7.16-tuxcare.8 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.7.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3a8ac21-023e-5cf1-be71-417ea067b6e4",
      "id": "CVE-2025-22235",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22235 is fixed in version 2.7.16-tuxcare.8 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.7.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5eb48f9-f45a-54fd-813d-b5040a4dca7e",
      "id": "CVE-2026-22733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22733 is fixed in version 2.7.16-tuxcare.8 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.7.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5659bcc6-e3de-5699-8dd7-cfc976e42b54",
      "id": "CVE-2026-40972",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40972 is fixed in version 2.7.16-tuxcare.8 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.7.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc1217f3-8850-5b17-b20a-cea8158fd0f7",
      "id": "CVE-2026-40973",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40973 is fixed in version 2.7.16-tuxcare.8 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.7.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:109b5731-0039-50b0-8cbd-7a9ffd7757c3",
      "id": "CVE-2026-40974",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40974 is fixed in version 2.7.16-tuxcare.8 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.7.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0c1bcfe-a6a3-590a-9ba9-13795759c194",
      "id": "CVE-2026-40975",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40975 is fixed in version 2.7.16-tuxcare.8 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.7.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f496325-23bd-57d6-abe7-270448795bc4",
      "id": "CVE-2026-40977",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40977 is fixed in version 2.7.16-tuxcare.8 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.7.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3e74e71-96d0-583f-8133-97ec8373e2b9",
      "id": "CVE-2026-40992",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40992 affects version 2.7.16-tuxcare.8 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.7.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3fee621f-8c26-5f2e-9281-52da665ddbad",
      "id": "CVE-2026-41001",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41001 is fixed in version 2.7.16-tuxcare.8 of org.springframework.boot:org.springframework.boot.gradle.plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.7.16-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.boot/org.springframework.boot.gradle.plugin@2.7.16-tuxcare.8"
    }
  ]
}