{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:27aa10d3-70b8-5194-9c08-52d2121f1ceb",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.4.6-tuxcare.7",
      "type": "library",
      "group": "org.springframework.boot",
      "name": "spring-boot-dependencies",
      "version": "2.4.6-tuxcare.7",
      "purl": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.4.6-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:2cef00f7-6458-5eb7-9baa-e45219ca371c",
      "id": "CVE-2022-22965",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22965 is fixed in version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d80ef87-a229-595e-b400-af4d15bf6f43",
      "id": "CVE-2023-20873",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20873 is fixed in version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77a1667f-c80e-53c9-bc7d-4bfb7fec7422",
      "id": "CVE-2023-20883",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20883 is fixed in version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c16f1606-0d75-5baf-86a6-d1e7915e93a0",
      "id": "CVE-2023-34055",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34055 is fixed in version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b53c4b88-2dc6-588d-864e-356c7ad7df85",
      "id": "CVE-2023-38286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-38286 affects version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba61fdb2-5757-5813-aca3-47e775496edd",
      "id": "CVE-2024-38807",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38807 is fixed in version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0af25812-50d1-5c02-945f-51c62ea65e29",
      "id": "CVE-2025-22235",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22235 is fixed in version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f295ce8-6430-5255-beed-742acea4139f",
      "id": "CVE-2026-22733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22733 is fixed in version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc99a2c1-2caf-506f-9a96-6fcc78f00065",
      "id": "CVE-2026-40972",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40972 is fixed in version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3dc1fdf9-1016-58db-9627-addcfae2343b",
      "id": "CVE-2026-40973",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40973 is fixed in version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0660520b-461a-53d4-bed1-af89f2edf819",
      "id": "CVE-2026-40974",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40974 is fixed in version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fc464a1-e713-50e5-8934-5d4b90ff5210",
      "id": "CVE-2026-40975",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40975 is fixed in version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82c5449a-337e-58d4-9f84-7b9b199089c0",
      "id": "CVE-2026-40977",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40977 is fixed in version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c85ac3be-de4b-5c34-8665-5e6560c1959a",
      "id": "CVE-2026-40992",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40992 affects version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b38e7dbb-7d69-5508-8738-0e698015b60d",
      "id": "CVE-2026-41001",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41001 affects version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.4.6-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.4.6-tuxcare.7"
    }
  ]
}