{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:56fc96af-5ebf-5fd6-9bfc-f4adda75def1",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework.boot/spring-boot-starter-validation@2.4.6-tuxcare.9",
      "type": "library",
      "group": "org.springframework.boot",
      "name": "spring-boot-starter-validation",
      "version": "2.4.6-tuxcare.9",
      "purl": "pkg:maven/org.springframework.boot/spring-boot-starter-validation@2.4.6-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:4cf27688-7014-54e1-bdcd-714519f527ab",
      "id": "CVE-2022-22965",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22965 is fixed in version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-starter-validation."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-validation@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e3a26f1-96f9-5781-a5fe-745b80918e69",
      "id": "CVE-2023-20873",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20873 is fixed in version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-starter-validation."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-validation@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f8c277a-6b48-52cd-8618-ea81f4911ab1",
      "id": "CVE-2023-20883",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20883 is fixed in version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-starter-validation."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-validation@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d81cb254-1baa-55e4-ac82-f37b7e00a091",
      "id": "CVE-2023-34055",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34055 is fixed in version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-starter-validation."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-validation@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:031b36ae-ff17-53e7-9740-ab438aa7df8e",
      "id": "CVE-2023-38286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-38286 affects version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-starter-validation."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-validation@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55a113df-0c61-5987-9ccf-a55a1fde850b",
      "id": "CVE-2024-38807",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38807 is fixed in version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-starter-validation."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-validation@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0969dcbe-421d-5bd6-86f2-d464bc3912df",
      "id": "CVE-2025-22235",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22235 is fixed in version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-starter-validation."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-validation@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:501bc89c-9afa-572f-908d-3beb093e8bd4",
      "id": "CVE-2026-22733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22733 is fixed in version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-starter-validation."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-validation@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:048ae644-00dd-57d6-bf6d-040b2c62b068",
      "id": "CVE-2026-40972",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40972 is fixed in version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-starter-validation."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-validation@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b20efde-da5a-5c80-8875-966c68088367",
      "id": "CVE-2026-40973",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40973 is fixed in version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-starter-validation."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-validation@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41c318e5-3520-5f16-a08c-f0ed5e0f2184",
      "id": "CVE-2026-40974",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40974 is fixed in version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-starter-validation."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-validation@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:acb4e13b-0a66-57c1-87a5-3338356037f3",
      "id": "CVE-2026-40975",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40975 is fixed in version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-starter-validation."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-validation@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34168452-3969-5f37-951d-5d6ad1f57605",
      "id": "CVE-2026-40977",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40977 is fixed in version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-starter-validation."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-validation@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d13a6aa-f2ce-5423-9667-96614c793f28",
      "id": "CVE-2026-40992",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40992 affects version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-starter-validation."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-validation@2.4.6-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:764f17c1-32ab-5250-9402-2862905be625",
      "id": "CVE-2026-41001",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41001 affects version 2.4.6-tuxcare.9 of org.springframework.boot:spring-boot-starter-validation."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-validation@2.4.6-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-validation@2.4.6-tuxcare.9"
    }
  ]
}