{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4356fcf4-e0ef-58d3-a52f-080be1536089",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-redis@2.4.6-tuxcare.8",
      "type": "library",
      "group": "org.springframework.boot",
      "name": "spring-boot-starter-data-redis",
      "version": "2.4.6-tuxcare.8",
      "purl": "pkg:maven/org.springframework.boot/spring-boot-starter-data-redis@2.4.6-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:3cf9fc6d-3350-5109-9e83-a61e2dbe995b",
      "id": "CVE-2022-22965",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22965 is fixed in version 2.4.6-tuxcare.8 of org.springframework.boot:spring-boot-starter-data-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-redis@2.4.6-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d516e16-46e8-5055-bdeb-062e0efd4162",
      "id": "CVE-2023-20873",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20873 is fixed in version 2.4.6-tuxcare.8 of org.springframework.boot:spring-boot-starter-data-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-redis@2.4.6-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62cb21aa-6352-5983-b62e-de2c1c260ebd",
      "id": "CVE-2023-20883",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20883 is fixed in version 2.4.6-tuxcare.8 of org.springframework.boot:spring-boot-starter-data-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-redis@2.4.6-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:450de51d-9f1e-5bad-a891-0ccf880c044f",
      "id": "CVE-2023-34055",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34055 is fixed in version 2.4.6-tuxcare.8 of org.springframework.boot:spring-boot-starter-data-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-redis@2.4.6-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a464ada0-d98d-58fb-97d7-cf7f48cfe391",
      "id": "CVE-2023-38286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-38286 affects version 2.4.6-tuxcare.8 of org.springframework.boot:spring-boot-starter-data-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-redis@2.4.6-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b2a192a-8581-51b0-8403-72d3d3302d0d",
      "id": "CVE-2024-38807",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38807 is fixed in version 2.4.6-tuxcare.8 of org.springframework.boot:spring-boot-starter-data-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-redis@2.4.6-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f1ff93d-464a-50a7-8dd8-f0b94de22d87",
      "id": "CVE-2025-22235",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22235 is fixed in version 2.4.6-tuxcare.8 of org.springframework.boot:spring-boot-starter-data-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-redis@2.4.6-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b789c1d-3810-5a63-9bdb-3add94d7dc77",
      "id": "CVE-2026-22733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22733 is fixed in version 2.4.6-tuxcare.8 of org.springframework.boot:spring-boot-starter-data-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-redis@2.4.6-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6448b99b-2189-5d2a-b21a-beb87ea0adea",
      "id": "CVE-2026-40972",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40972 is fixed in version 2.4.6-tuxcare.8 of org.springframework.boot:spring-boot-starter-data-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-redis@2.4.6-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06da04c2-db60-5180-bd24-512da8c261ed",
      "id": "CVE-2026-40973",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40973 is fixed in version 2.4.6-tuxcare.8 of org.springframework.boot:spring-boot-starter-data-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-redis@2.4.6-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56eee79a-33c2-5a40-b6bf-6058c1157c34",
      "id": "CVE-2026-40974",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40974 is fixed in version 2.4.6-tuxcare.8 of org.springframework.boot:spring-boot-starter-data-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-redis@2.4.6-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e2f7567-00d4-5e01-81f7-774cbbc09827",
      "id": "CVE-2026-40975",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40975 is fixed in version 2.4.6-tuxcare.8 of org.springframework.boot:spring-boot-starter-data-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-redis@2.4.6-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b46a08eb-d3a0-57b5-a302-c32772cdf2bf",
      "id": "CVE-2026-40977",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40977 is fixed in version 2.4.6-tuxcare.8 of org.springframework.boot:spring-boot-starter-data-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-redis@2.4.6-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fdcdecbe-2553-5808-ac7b-5295a58f3cf9",
      "id": "CVE-2026-40992",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40992 affects version 2.4.6-tuxcare.8 of org.springframework.boot:spring-boot-starter-data-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-redis@2.4.6-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9ccd862-2ee3-534b-a434-2a0a66716ace",
      "id": "CVE-2026-41001",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41001 affects version 2.4.6-tuxcare.8 of org.springframework.boot:spring-boot-starter-data-redis."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-redis@2.4.6-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-redis@2.4.6-tuxcare.8"
    }
  ]
}