{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:07dbee7e-ad27-5207-875f-4dc9f7aa4338",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework.boot/spring-boot-configuration-metadata@2.4.6-tuxcare.9",
      "type": "library",
      "group": "org.springframework.boot",
      "name": "spring-boot-configuration-metadata",
      "version": "2.4.6-tuxcare.9",
      "purl": "pkg:maven/org.springframework.boot/spring-boot-configuration-metadata@2.4.6-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:b8f6747b-0142-529d-abd7-9efb27dd5e7b",
      "id": "CVE-2022-22965",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22965 is fixed in version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-configuration-metadata."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-configuration-metadata@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d94325f5-2277-54f1-813b-f5ddcca4faa2",
      "id": "CVE-2023-20873",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20873 is fixed in version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-configuration-metadata."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-configuration-metadata@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3df6748-40c8-577d-a588-5a90c6f21a0b",
      "id": "CVE-2023-20883",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20883 is fixed in version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-configuration-metadata."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-configuration-metadata@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f26b3ab6-7b7c-53ad-a03b-44e30148fe1d",
      "id": "CVE-2023-34055",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34055 is fixed in version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-configuration-metadata."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-configuration-metadata@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28bb6991-dd72-5002-8a66-7a667efa857f",
      "id": "CVE-2023-38286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-38286 affects version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-configuration-metadata."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-configuration-metadata@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:011e3dec-6a6f-523c-9cba-f51a77004542",
      "id": "CVE-2024-38807",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38807 is fixed in version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-configuration-metadata."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-configuration-metadata@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:adaa050c-90a5-5f17-912d-78e0e3c48db7",
      "id": "CVE-2025-22235",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22235 is fixed in version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-configuration-metadata."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-configuration-metadata@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c193b70-d50c-56d5-8bac-947a694f5229",
      "id": "CVE-2026-22733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22733 is fixed in version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-configuration-metadata."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-configuration-metadata@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7ccd208-4871-5166-b7ae-62cd704748ba",
      "id": "CVE-2026-40972",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40972 is fixed in version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-configuration-metadata."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-configuration-metadata@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2009840-63e0-532f-b628-df6ef61ecd1d",
      "id": "CVE-2026-40973",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40973 is fixed in version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-configuration-metadata."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-configuration-metadata@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d0380fc-d5c7-50b9-854f-6685f60d2b0c",
      "id": "CVE-2026-40974",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40974 is fixed in version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-configuration-metadata."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-configuration-metadata@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ac4700a-6f20-534d-8fee-0fac612721c8",
      "id": "CVE-2026-40975",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40975 is fixed in version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-configuration-metadata."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-configuration-metadata@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef66ecc2-336e-545b-8569-5c3215be21d0",
      "id": "CVE-2026-40977",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40977 is fixed in version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-configuration-metadata."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-configuration-metadata@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c86a3fa8-4623-5795-a402-db4805ffd9a3",
      "id": "CVE-2026-40992",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40992 affects version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-configuration-metadata."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-configuration-metadata@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f58d6997-bece-55bc-a59e-4dda37b548cb",
      "id": "CVE-2026-41001",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41001 affects version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-configuration-metadata."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-configuration-metadata@2.4.6-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.boot/spring-boot-configuration-metadata@2.4.6-tuxcare.9"
    }
  ]
}