{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9c1f7b6e-9c53-595b-aa32-4b29a6eeb352",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.7.16-tuxcare.9",
      "type": "library",
      "group": "org.springframework.boot",
      "name": "spring-boot-starter-jdbc",
      "version": "2.7.16-tuxcare.9",
      "purl": "pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.7.16-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:8f4e2e8d-0988-52aa-b373-33fbdba5f7e2",
      "id": "CVE-2023-34055",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34055 is fixed in version 2.7.16-tuxcare.9 of org.springframework.boot:spring-boot-starter-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.7.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38205e0c-db91-5c31-9bc2-4adcdc537085",
      "id": "CVE-2023-38286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-38286 affects version 2.7.16-tuxcare.9 of org.springframework.boot:spring-boot-starter-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.7.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f22b485e-8a9c-5314-b44b-7bfe9e34a842",
      "id": "CVE-2024-38807",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38807 is fixed in version 2.7.16-tuxcare.9 of org.springframework.boot:spring-boot-starter-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.7.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48a10ed8-ad29-5563-95f2-cb696020bf0a",
      "id": "CVE-2025-22235",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22235 is fixed in version 2.7.16-tuxcare.9 of org.springframework.boot:spring-boot-starter-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.7.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2646fe8a-fdc7-5a3d-a8ba-6ad04292c892",
      "id": "CVE-2026-22733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22733 is fixed in version 2.7.16-tuxcare.9 of org.springframework.boot:spring-boot-starter-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.7.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4298f49e-f2b4-5836-81c3-178e50cc0b2d",
      "id": "CVE-2026-40972",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40972 is fixed in version 2.7.16-tuxcare.9 of org.springframework.boot:spring-boot-starter-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.7.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf0e6e95-2194-5200-afaf-25e14658de7b",
      "id": "CVE-2026-40973",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40973 is fixed in version 2.7.16-tuxcare.9 of org.springframework.boot:spring-boot-starter-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.7.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72208de8-16ed-56ef-b9c7-063f79e99a88",
      "id": "CVE-2026-40974",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40974 is fixed in version 2.7.16-tuxcare.9 of org.springframework.boot:spring-boot-starter-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.7.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b17a08ae-d639-576f-8126-3fdc10cb8d7e",
      "id": "CVE-2026-40975",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40975 is fixed in version 2.7.16-tuxcare.9 of org.springframework.boot:spring-boot-starter-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.7.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ed9c7c8-c1d2-5010-a34c-103e201151b5",
      "id": "CVE-2026-40977",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40977 is fixed in version 2.7.16-tuxcare.9 of org.springframework.boot:spring-boot-starter-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.7.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32bf1fd8-1712-51d7-b688-366ffe3887d9",
      "id": "CVE-2026-40992",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40992 affects version 2.7.16-tuxcare.9 of org.springframework.boot:spring-boot-starter-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.7.16-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c65401a2-7f92-564c-92f8-0c2e01a284f2",
      "id": "CVE-2026-41001",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41001 is fixed in version 2.7.16-tuxcare.9 of org.springframework.boot:spring-boot-starter-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.7.16-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.7.16-tuxcare.9"
    }
  ]
}