{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:51e7de79-d498-5923-9b16-3f3b31204bb6",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-jcl",
      "version": "5.3.39-tuxcare.18",
      "purl": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:8c28b36e-7c5c-542e-b6f7-7829e526dd44",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:379720e0-0234-504d-9a22-988b5eb346de",
      "id": "CVE-2022-22968",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2022-22968 does not affect version 5.3.39-tuxcare.18 of org.springframework:spring-jcl. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:caaed4d6-b6a7-5810-abe6-5b883b225e17",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1dccfcfd-845c-57c5-aa72-c6e136e69cdf",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83b343d9-5537-5175-89fa-7112f0f613c5",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02eb67d3-8804-5deb-849e-44c7e2b207ac",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b1971e6-5026-5712-8e32-7b6673dafbe6",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43785dbc-b98d-5dfa-886c-913406ba8281",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-jcl 5.3.39-tuxcare.18."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39bf48fc-a39a-5781-a17e-853a0872719a",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2bc21e16-d97a-51be-9cd0-492ef3e164d6",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:757c3446-a26c-540c-b3a9-2ec0e9a827ff",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6208db98-00c6-5672-835f-d062ec2d7628",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b98121fe-34de-5256-9d7e-6ebc90f6aa65",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f904da6d-c710-54da-b316-49465fca5c68",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d5f3304-81dd-5dc6-a860-5c7844813c5b",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2d865e6-d8ef-59ad-9d30-612841b28f0a",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:022b5758-b2ce-5744-90d1-08fffe9540f8",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91bfff6b-d863-5ba4-bff1-3cd3dea43fc7",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae94d928-e56f-5ec0-a6ab-9f987ffaf8df",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16687b76-4ad1-5f1e-96c4-d44c0ba611c4",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b63da00-48eb-5823-b2fc-3d34c87099fb",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f5b6b8c-d8b7-5178-ace8-30cde8347517",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8638129-7da0-5a3d-92bd-acaba2b91183",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0228d9a-82ac-5015-b3cd-907134d82433",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:840218a7-4852-516b-b85b-4cfea631b52a",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8935f29-c053-5f3e-8e09-b6ae716eb60d",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4713358d-c8bd-5b08-82cd-1cb35360269f",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0375012-304b-5651-8adb-d47a0cfed1e1",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1dd8624-8b43-59f2-bd84-6c88e6cfe90c",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e426483a-f3ac-5114-ad7d-86c8d75c173b",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee85c9fe-5b84-520f-9483-98bb330cad95",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4efe2bc3-ff6a-5d0b-8799-cab118adb205",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e29ccbb4-85ef-5049-9bee-7ebe1f0bf431",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9e3a904-457f-5caa-9027-b14d517bbab3",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.18"
    }
  ]
}