{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:14d6dc7f-3878-5821-ba14-f4e16ff98f4f",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework.boot/spring-boot-starter-undertow@2.4.6-tuxcare.7",
      "type": "library",
      "group": "org.springframework.boot",
      "name": "spring-boot-starter-undertow",
      "version": "2.4.6-tuxcare.7",
      "purl": "pkg:maven/org.springframework.boot/spring-boot-starter-undertow@2.4.6-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:ba93a1ce-1aec-5e59-ac04-2c0d2d0bcd48",
      "id": "CVE-2022-22965",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22965 is fixed in version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-starter-undertow."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-undertow@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bd9a985-378b-50aa-88aa-50de4145d592",
      "id": "CVE-2023-20873",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20873 is fixed in version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-starter-undertow."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-undertow@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7cef1650-e8e9-54ed-b1ca-dc9b91161a6b",
      "id": "CVE-2023-20883",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20883 is fixed in version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-starter-undertow."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-undertow@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e44c3324-aca7-524d-a999-5be17eb742f5",
      "id": "CVE-2023-34055",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34055 is fixed in version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-starter-undertow."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-undertow@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2055555c-42c9-5a23-8f03-cb76d2aeed02",
      "id": "CVE-2023-38286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-38286 affects version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-starter-undertow."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-undertow@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d68ad328-2aa7-5420-ac8e-62c0169d4146",
      "id": "CVE-2024-38807",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38807 is fixed in version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-starter-undertow."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-undertow@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b717704d-d478-5b5a-bfeb-09d4591ec054",
      "id": "CVE-2025-22235",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22235 is fixed in version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-starter-undertow."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-undertow@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:310e1b1d-0f71-5ea6-9f9e-a6547ac81438",
      "id": "CVE-2026-22733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22733 is fixed in version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-starter-undertow."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-undertow@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35d78daf-2c33-5ace-8a12-657222cc9fdc",
      "id": "CVE-2026-40972",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40972 is fixed in version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-starter-undertow."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-undertow@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88924022-89d3-5b58-9f56-7ef003c30215",
      "id": "CVE-2026-40973",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40973 is fixed in version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-starter-undertow."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-undertow@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc38e346-b5e4-5d33-a72e-cf50aa6de010",
      "id": "CVE-2026-40974",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40974 is fixed in version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-starter-undertow."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-undertow@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58bc31f8-f621-55be-a7b4-da7c5c2d3c2c",
      "id": "CVE-2026-40975",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40975 is fixed in version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-starter-undertow."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-undertow@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbca6398-52ab-5345-8ad5-28a8a98f1d41",
      "id": "CVE-2026-40977",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40977 is fixed in version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-starter-undertow."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-undertow@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24ac60a7-54ee-529d-a906-746c7ed09e60",
      "id": "CVE-2026-40992",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40992 affects version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-starter-undertow."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-undertow@2.4.6-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20032f41-ef81-5278-8432-a0bae1602e3d",
      "id": "CVE-2026-41001",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41001 affects version 2.4.6-tuxcare.7 of org.springframework.boot:spring-boot-starter-undertow."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-undertow@2.4.6-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-undertow@2.4.6-tuxcare.7"
    }
  ]
}