{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2d024bb2-765e-5a77-988c-9a903a7d31d5",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-instrument",
      "version": "6.1.7-tuxcare.2",
      "purl": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:67267302-2417-566a-9c23-01e824b4c329",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38b69570-fb2f-58a1-8557-560694ee21a5",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:414535f5-1f95-54b8-a739-89f4278777be",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38819 affects version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d923835-a09e-546d-a52f-b7e6efb3f143",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a578f3a8-475b-5ba3-930a-588ecc8882cd",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff9e163a-87d3-500b-befe-6191add1c221",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41234 affects version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5455545e-6d43-5ff0-9afd-f75090936774",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9b6cf92-2362-5ace-89b4-620fa40011a2",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7352df52-a474-5e29-bcb1-f41ff285be82",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7875f02-3a62-5e9e-8558-03117f527d59",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fdd885c5-ec0b-5754-b7fa-e996a3881535",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e53b1f3-2ea9-5e29-857f-78e59f883354",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8179b19b-2658-5fef-84e4-41065bad4077",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f5da33f-7df0-5551-9633-8ac8c3e94e6a",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a72e695-58c1-53f6-9856-b3c2fc029264",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6dfa1e0d-4607-5f30-904e-1bd712ae79f3",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ccbd610-e6e0-5100-a66e-a8a909296fa1",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06737a94-d89f-543f-95dd-f1eaf3c78e31",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d73b7e7b-6628-5762-9e41-2397e036ce7e",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25adbef4-353c-54e1-85ba-c5656162796b",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd51e261-a1ad-5754-a000-2ecfdbadb262",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb87f846-32e0-5301-ae9d-414ba9303196",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:adc07d57-2b62-5dd7-b38e-5fda646271a9",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57f4f6f7-e7d7-54a6-810f-9b479a3bdbc6",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d247a2f4-f857-51b5-9239-3d2189828b7c",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02c4bff2-d097-59cd-8c90-ed668db773f0",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d998b321-234e-5860-8595-30203284926c",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b507aace-6e15-5c29-8945-a86a2c9e4403",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c51acbc-1357-50f9-8c6a-8bb6b649440f",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-instrument@6.1.7-tuxcare.2"
    }
  ]
}