{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9b8bcd3a-06f2-5df6-9449-f5bb713493bd",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.7.16-tuxcare.8",
      "type": "library",
      "group": "org.springframework.boot",
      "name": "spring-boot-starter-actuator",
      "version": "2.7.16-tuxcare.8",
      "purl": "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.7.16-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:09a68075-c008-527d-8c39-84075a014e27",
      "id": "CVE-2023-34055",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34055 is fixed in version 2.7.16-tuxcare.8 of org.springframework.boot:spring-boot-starter-actuator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.7.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43715e01-0e93-5e6c-be7c-c3bf50c49e8f",
      "id": "CVE-2023-38286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-38286 affects version 2.7.16-tuxcare.8 of org.springframework.boot:spring-boot-starter-actuator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.7.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca4cbdf2-c5fb-574a-bf52-bc6a400179ca",
      "id": "CVE-2024-38807",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38807 is fixed in version 2.7.16-tuxcare.8 of org.springframework.boot:spring-boot-starter-actuator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.7.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f188903-b710-5c9a-b85b-0b8e4be4d83e",
      "id": "CVE-2025-22235",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22235 is fixed in version 2.7.16-tuxcare.8 of org.springframework.boot:spring-boot-starter-actuator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.7.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85424ca3-f598-5c09-a63e-a900539cb262",
      "id": "CVE-2026-22733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22733 is fixed in version 2.7.16-tuxcare.8 of org.springframework.boot:spring-boot-starter-actuator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.7.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec43e676-f223-5038-b4f8-1985b34aa435",
      "id": "CVE-2026-40972",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40972 is fixed in version 2.7.16-tuxcare.8 of org.springframework.boot:spring-boot-starter-actuator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.7.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4acd099-5617-5e2e-b094-b8ce4acb9f3b",
      "id": "CVE-2026-40973",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40973 is fixed in version 2.7.16-tuxcare.8 of org.springframework.boot:spring-boot-starter-actuator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.7.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3aaf8919-9ab5-5695-8b86-581278851df2",
      "id": "CVE-2026-40974",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40974 is fixed in version 2.7.16-tuxcare.8 of org.springframework.boot:spring-boot-starter-actuator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.7.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9462086b-fe62-5aa3-b780-78cdd55b4429",
      "id": "CVE-2026-40975",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40975 is fixed in version 2.7.16-tuxcare.8 of org.springframework.boot:spring-boot-starter-actuator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.7.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf15842f-5ad0-5ff7-927f-bfc87019917f",
      "id": "CVE-2026-40977",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40977 is fixed in version 2.7.16-tuxcare.8 of org.springframework.boot:spring-boot-starter-actuator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.7.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8242e013-9245-5039-bb45-ef12092f7f29",
      "id": "CVE-2026-40992",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40992 affects version 2.7.16-tuxcare.8 of org.springframework.boot:spring-boot-starter-actuator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.7.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7868ce15-8d99-55d9-97b1-f359936ad2ee",
      "id": "CVE-2026-41001",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41001 is fixed in version 2.7.16-tuxcare.8 of org.springframework.boot:spring-boot-starter-actuator."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.7.16-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.7.16-tuxcare.8"
    }
  ]
}