{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ac57a49a-ff0a-532d-aa2b-124decf3f5fb",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-web",
      "version": "6.1.15-tuxcare.2",
      "purl": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:26c19e8c-afc9-58b8-9d37-cee2469ed5ab",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a31737c-8b9d-5f5a-ad9f-6fd727489c10",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1721d8b-072b-5be7-96bf-a589b4fb5a0f",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6116e4fe-b8df-572a-83f4-c3f1f7248d0d",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.1.15-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b44dd29-5c0b-59dc-b29b-911a2eb7cf30",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51ce7dc0-61b2-53ae-85cb-9815bec57fba",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7ba7f08-a630-5423-9c9c-bd7db4b3ed4f",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.1.15-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d8f19d0-7b15-5bab-a01b-651890e67713",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.15-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0408ef0-89a5-59ab-9f93-0b0e5c87bc49",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:903bc97b-a62c-5c52-b4d5-0cd3b3757397",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57675e9e-c95c-5b22-a210-41934909e6c7",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e7dfcb9-5ae2-53ee-9d85-67c22b9a4f22",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cc5f259-d185-55ee-bd77-3f9ccfc67f07",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.15-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2814bd69-6c92-5948-acd8-8bf7068a368c",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.15-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e43c91ff-5579-5ed4-8060-d9534959c701",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.15-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56165766-77d3-5713-9e4f-1a1cb170a72c",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.15-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa436f30-a326-595e-b7d7-406f9bfc1f97",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79799d80-2228-5bbb-b417-91055c837144",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6706e1ab-62da-5370-b6f8-74b17e1a71c5",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.1.15-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f292287b-a434-5cc2-8633-3dc00f6287a3",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.15-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95656457-8621-5a3f-ac5c-d3cdd0becbbc",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:919e5a75-ab61-52ee-84ff-8d3f7afb8b87",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.15-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d39a2c2b-1d0f-5604-83ec-cb712c737395",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ffb43032-d003-5f54-8938-031f962b9c16",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af1a3557-6a28-5825-91de-afc9547c5e06",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.1.15-tuxcare.2 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.1.15-tuxcare.2"
    }
  ]
}