{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e75c2030-546c-5f94-b52d-f8e4d3fd42d5",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-web",
      "version": "6.0.23-tuxcare.1",
      "purl": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:688d0e96-c7b1-55c1-a981-7103f23bdaad",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38816 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c70d8ca7-de63-54e0-8801-de0a3134adc5",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:241d6cd7-c6b2-5905-b7a2-7395630b54b6",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a87078ee-ad43-5d27-b956-8209d567e2d5",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fdb15c3-87ce-5ddb-a356-bd2f8215430b",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa67a4bb-1a13-5865-b133-4347138c728a",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f0400c0-dc3c-5f15-a61b-1222226299d8",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd46e09a-59e4-51a4-a2cb-5c83c7c6855c",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e535eb4d-17f4-5029-8c8b-23cedf32ea8b",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:905346ea-1902-5aeb-a6cc-251c5472b7b7",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3341c36a-e300-52e9-ae38-40d5fe7df9db",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:546b23d6-6ec5-50b0-bab3-fb6a0d7b8e07",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22741 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95bc722b-c0b3-58df-980f-bf0e2e579b1e",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22745 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:224d72ea-5092-5d2f-abb3-f6036c958b68",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a59c950-c7f9-57b4-bd2a-6f8b512d0448",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68d4d8ee-565e-54c7-88a4-10081d343761",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5e36171-10e2-517b-8562-0618180c6332",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ef0eaf6-debf-58ee-86bd-7c94f928b17b",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dec4786d-6d88-5ee2-83a8-c3219b74e822",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9b1a927-6699-5d65-ab96-bc69e8117695",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41844 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:152ce754-e949-5fcc-a89d-e2ef1438ae8a",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41845 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6dd00dd3-0f3d-57a5-b942-444196c54089",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d4a5636-1c13-5d18-a798-315a53491c4d",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74f1864c-896a-5b23-b76c-f1bd9829e253",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca20d809-7ed3-517a-889d-d0f55cf0c29e",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87a29278-1708-513c-ab2c-77360bca5c23",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e726692-ee70-5803-a895-e6f36f83fe86",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc2b0e20-f0a7-5587-956a-4721c5a0f9c7",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.0.23-tuxcare.1 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.1"
    }
  ]
}