{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4deab6fb-54ba-5d4b-958a-151e83b3e433",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-instrument",
      "version": "5.3.24-tuxcare.5",
      "purl": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:8469a603-a349-5478-bf99-509d14fe863b",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a71b08cf-c862-5983-a30b-baa1e7d533d0",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3837c0e-2e69-5b16-83ff-ccba83ef0601",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32f5ec54-fb0e-594e-b2cd-aa82216bea27",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:391d5129-5dba-5e63-8f17-bab675c3128b",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a16ec56-5020-59f5-806c-0da09a3d4f20",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:568d3d08-39ec-5d19-b57a-73ae4291e0e2",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4174c9f5-4336-533f-ba4a-a1450972ab5a",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38cc4010-d00e-5f5d-82a4-feda280a254c",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d38d7699-d610-5523-8df2-17ee9024a296",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5478abe4-f5d9-58d6-aaf4-aff00bf15778",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05bce973-88c9-5607-be69-06f70474f994",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c32d0d8-9609-58ad-a816-48de0115507f",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3dc5e1fb-5252-5022-940b-6e6b3638f0ce",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:803a7bd7-d128-56a9-8f04-49c8d7fe41c8",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a11990c5-0da2-5d5f-8580-19be8811bee3",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f811b60-a26d-5b93-84e6-738a30c6a23d",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cca03bd6-32b5-5daa-924c-cc580e717e17",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aaca9379-72e9-51c8-aae0-a0f5f6f51174",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab549658-b710-51bf-998d-3a64508cd88b",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28e8b214-d94c-5a46-82bc-6e515c4bf19b",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e051a8d-613a-50b4-b701-f825f96dfd20",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c688076c-64d2-51a5-b169-1186b60a3fe8",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65f376f6-65a5-5292-89b8-031e746a2d1b",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b79d7cb-9b74-5791-8201-d52c2d5f9ec2",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.24-tuxcare.5 of org.springframework:spring-instrument. Patches already applied: 7052da453285658215efc1dd5ecb0d472fde2de1 (already in target via 2c11852775 'Backport CVE-2026-22740 to 5.3.24')"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebbc4f9f-b488-5095-9340-aa6f1ef3f62c",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:990b5bb0-71d4-521f-9b44-ad07ed583446",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c95824a-93ea-527e-930f-b97dacebccda",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94b24760-5abb-5d2b-bb98-ce90c439df29",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2704c580-71bc-5870-ae57-89b73d311369",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5287e43e-18ec-5abf-b29f-d1ca29da2334",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08c66e37-e171-57fc-9f29-7686c51eb158",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a750454-e29e-51ff-bb06-112544643489",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99a4bb92-5b3d-5047-849e-dfc67c2fe107",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bcbee1ab-e4cd-5e28-bade-6de0cc4fb3b7",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08c47355-ed68-5e6c-bb13-8be5beef8748",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1832e23-06bf-5b5c-b2de-3fb0f0796b6b",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7191a78b-f309-5909-9c6a-e9248c910772",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4563583d-53f1-5814-b44a-b2440728c0f8",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d7d5466-aad9-564a-99fc-e2611357b4cb",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 5.3.24-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-instrument@5.3.24-tuxcare.5"
    }
  ]
}