{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f37b2ca6-3c0d-50da-a72f-c3e31f202fd4",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.2.15-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-web",
      "version": "6.2.15-tuxcare.3",
      "purl": "pkg:maven/org.springframework/spring-web@6.2.15-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:85ea8d4c-b042-5f4a-b02d-9449d5cf181a",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.15-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.15-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6aae5a7f-e72c-5e35-8355-c89ee095d5b9",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.15-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.15-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c32f9a2-6343-53ac-bc79-67ebcd021b49",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.15-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.15-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f26d1d1b-7899-5f43-9fdf-77330da06fb6",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.15-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.15-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26b2bef4-1ae7-5676-a7f0-68d19d165f1f",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.15-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.15-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d50c6668-922a-55e9-8dab-f64f98dc44b2",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.15-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.15-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afada3ca-5b73-5e5b-b1b5-2bd2e754aa29",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.2.15-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.15-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5f6301e-1580-5029-8a63-c35b2b345cdb",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.15-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.15-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:792d2eaa-da4d-5998-9ad9-bf9cd6e279fe",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.15-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.15-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:422fcb35-0fda-58b8-81c9-3cfd75dbd0d9",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.15-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.15-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1833ff8a-da72-5df1-bc78-6bec9942c7ea",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.2.15-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.15-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2a863dd-8d67-51c1-bc1b-4ba6f7576e47",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.15-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.15-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11952fe8-9971-5aae-8ac0-784184d468bd",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.15-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.15-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa723369-ee3b-5353-9fd5-4d007159e50a",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.15-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.15-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1af7cba2-ffcb-5344-884e-73fb2ce9de18",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.2.15-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.15-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd48ef1b-620e-5edf-b11b-51b20d6ccaa2",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.15-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.15-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2318f8ff-12bd-58de-b64c-477c054cb16a",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.15-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.15-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3021d45e-cd37-5dfe-8261-4dd8738ffc99",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.15-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.15-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44367b1b-5aab-541f-8ed8-d70b2ad25948",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.15-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.15-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cafb074e-702f-5254-a9f5-3222795296df",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.2.15-tuxcare.3 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.15-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.2.15-tuxcare.3"
    }
  ]
}