{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:8a2f50bd-cf04-5546-8083-354970fc8ca8",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-r2dbc",
      "version": "6.1.20-tuxcare.8",
      "purl": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:efcfc390-4466-5551-9c67-08a804611feb",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edbd3129-ed83-5d24-a956-1c22fcf3069a",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0fcaba6-00bf-5e25-b33b-0265fa0a178b",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb56d0de-b287-5559-b9bf-ca4a08f3869c",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b00c29c-0ff1-5509-9cfc-a0faea314bf1",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70cdeb1a-41f9-5213-b6ba-810671ca35a2",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee63f6f7-2c3c-52de-85fa-0decb3e509c6",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48fbf4fe-a41b-5574-b084-d8b1ab4e3cba",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a9a62be-f3cf-5770-9bad-d07f3fbc53c4",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9dbfc447-22be-506d-9789-4e7cc0a14915",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5bc97f37-4e1d-5fc3-85fb-010f995ed62d",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49c898b3-e842-56c3-9fa9-90db9f736651",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efa747c3-5e87-5bc7-855f-b3e17251ca18",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b1ad931-5ca3-59e9-a418-fc7df283d252",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:863d063c-3885-59b2-8a0f-e5be4cdbcde3",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6205c312-d6b9-5c36-a94c-8e6da794bfb2",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3374038-1b6a-5daa-8407-f0c778fbc799",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7953d443-5c13-5cf1-acdf-18ffa7263c72",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea6017d5-7d31-5763-b008-3b72d83a9a13",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b696a11d-8398-5b38-bade-d394cef2ee4d",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ac14a10-204e-541c-9f94-72ff1c4b7ff6",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13ab252f-dfb5-509f-9c7d-b900a13f39a8",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06c6d2e6-f6b6-571a-8faa-8eec8415095b",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:989abcfc-81b8-5305-93ac-3a2a6ef042cf",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc6d96d0-dd39-5ce3-89b7-d75e57f4c268",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6e5f8be-3544-5d64-97ac-6b4d6688275a",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8"
    }
  ]
}