{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ce706e06-f747-572f-97e2-c3128fd01a67",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-tx",
      "version": "5.3.39-tuxcare.18",
      "purl": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:e6392b36-b880-5dfb-94ed-d56080ef28bc",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9f5ead6-3725-5876-bc72-714ea1157ff2",
      "id": "CVE-2022-22968",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2022-22968 does not affect version 5.3.39-tuxcare.18 of org.springframework:spring-tx. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9bde9ecd-0dbb-59eb-ac78-b1fd58e2a7d6",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1d084e5-6bdc-5c61-8601-2f44077a34e1",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e38d7c3-c288-5f3a-b927-f8d41ad572ff",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39022bd6-aee6-51ec-9352-9b29bcd21f09",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cacd574-d45a-5be4-be45-afd4e48ab506",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a68e71a-c3bb-560e-ab65-73ca2b8e9434",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-tx 5.3.39-tuxcare.18."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a427453-91a5-554d-83e9-3cf9ae43122b",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:544c70d6-357f-5862-be24-553f4d5883e1",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12551ce8-1539-5bd8-ae27-d3fd959f5683",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d6db226-7b40-5960-a63b-aff7eecac5ea",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:477bb116-e150-5a78-8d7d-d8fee34df35f",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe0b5c9c-2504-5981-b25b-b98d5dc3de08",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42f98de7-6ff1-51ed-ba27-a8471f2797c9",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2f5d103-9b64-5ce9-84ca-6fb9188a03ea",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a79925f-d974-57a1-8f5a-1f0ff64ed6dc",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3d23a27-3b74-58c0-9416-1c30c6c7f31d",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fffa5c2-993b-5a6b-b3a8-c19c2fc08a9f",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:faffcf74-8771-5233-9b82-269cb2a22449",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20561b6a-f6e1-547d-b465-d1f733cf43ad",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0c13f3f-2e4e-5d34-a32f-acb00c99344e",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f83a2ccc-95e1-5296-bbb3-8217d5ec3b12",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2804bbbd-8f8b-596b-84d1-caffdc694d70",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1440a8fa-e0db-560f-84a1-bfc4f6490980",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8789c06f-e49d-5fe0-aa9b-c59606528447",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75d93312-f22d-5a35-858b-dee51cd204e5",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5f578e4-3367-59b6-8a06-e5e8722832ae",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee9d1476-ce48-5737-b6c8-77c9643194f3",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62af3878-866d-5b8c-af4c-9f744a993c76",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e3bd50a-7a97-5c3a-a32f-e6a6869a7253",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d6128a3-d060-5c0e-b010-cf83f16f37f8",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99c9a352-a15a-5b83-8332-777278eb503e",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85335bbf-9534-56f9-8ae2-eeba7e29cfe5",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-tx@5.3.39-tuxcare.18"
    }
  ]
}