{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:46a84d8d-cda5-5813-bb1c-04527e4ba0cc",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "6.1.15-tuxcare.2",
      "purl": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:14b01e71-fc8e-5155-bccd-c6545e61a125",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c16b971-6439-550d-b802-969c127b3259",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed9d9850-2f8b-56f3-93a8-c32aa3b1f0ca",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d743b65f-c8c7-5016-bc95-fe897daf8f66",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bdf6a0c-2938-56f0-92de-f40c445179a3",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ea7d7cb-9ace-514e-b5b8-a099368ddb68",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:534e241b-dbd6-5538-9f30-3865c7e629c6",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5681b47b-dc15-5b46-81ca-87407a07a5eb",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ddbffde-c43b-532f-9dc2-58575285f19c",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ddc0cf37-2a3c-5a4f-9eca-c94bae726652",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08f055a0-ee0d-5d99-94da-359bd81562e4",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88eec4ce-c5f5-5d5c-ab02-ca04ef1aa11f",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f09ee3d8-91de-5408-b359-1e02668a64a6",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57f0d036-6e30-5f14-8f8c-dd2fa00269fc",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23ce95d8-fdc0-5b06-aba4-019ef3c605da",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:912fbb8a-65c7-5446-99ee-ec4ffab9fc96",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bca3554f-8a4d-55eb-b6c4-a6c5ff11575e",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:331e0f52-830b-58aa-b99e-b0436cc1275d",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05399f7d-5497-5e84-ae71-1f56804c7b2c",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f55f3b7-5ce2-58f2-a7a7-350e4815693d",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f339c0a-7cab-5cfa-9546-fe6ce55b7e2b",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:405a2e00-433f-55bd-be39-74ad78ef5c1f",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6fec6c85-f17f-5425-a911-66a716b0693a",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42962c67-426c-513d-90eb-edb03a72059d",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4bb0b98-7ce6-51c9-ba26-f65a4428d36f",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.1.15-tuxcare.2 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.1.15-tuxcare.2"
    }
  ]
}