{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f7061184-a7db-553b-9093-7624ab9d9c2c",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-jdbc",
      "version": "6.1.21-tuxcare.10",
      "purl": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:3d33e427-13fc-5bca-820a-f890fcd7588e",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.10 of org.springframework:spring-jdbc. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0f6f939-1513-58d4-8858-637241ca659a",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3cfb7755-39e4-5778-8def-d92491f2c0c1",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5acfdcfb-d397-57db-ab40-d4ccc5ac98a4",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1642d87c-cf81-56e8-82c7-c9ed3003d62a",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbd85560-09d3-57da-9cdb-2e6fd133fa43",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df1d0082-85e4-549b-b735-f5efe43ff486",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d3b834a-9bc1-5bbc-a290-37a4b92af7fb",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afd7c6ab-d331-5716-a9a1-5a7da79996ea",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79118b0d-0cf9-5499-bd3a-d33beda380c7",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15cd0593-3127-545a-9e6f-e18a6bdcaccd",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0697fb15-8382-5b07-a0b0-b5d427e72d8f",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.21-tuxcare.10 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ee35ad7-dfcf-57d8-8521-62634653fcce",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6187c6f1-12f2-5478-b2ff-55958d54e6b0",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1fe56206-f9a4-5a4d-8675-1233d012c1a4",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e25af9b7-a527-5791-8a05-ede6ee8ac339",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a8a7729-01e1-5011-bcfe-ba6f1ab32dc4",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e147f4a2-0d80-57ea-a2c2-42afc506793c",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2152e140-894c-579b-b5c6-a31b5a3f2dd0",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ccfede7d-39a5-5244-a5ca-e42e25e88445",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6e34503-8dfe-5527-a909-5dc46873d651",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.10 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4367afcf-a00a-5a22-bbf8-0ea196cf9260",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4db52d0-b792-5d4a-bc2a-80a3eaf77144",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79715778-fe6a-561f-b618-def2e7cfbc47",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6dd171c7-339f-51e8-831d-29d29c454d48",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.21-tuxcare.10"
    }
  ]
}