{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:05f9089e-c508-5362-8159-fe4ebfe720b4",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-webflux",
      "version": "6.1.21-tuxcare.10",
      "purl": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:3a6e8b99-d061-591a-a797-8b7f90101fed",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.10 of org.springframework:spring-webflux. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e072985e-67bd-5057-929e-1abb0ebca038",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ecfc0f0-2ffd-5a96-9d13-3761179e6665",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:683a8d9b-1133-5da1-961c-71a80b9ef02f",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a49170d7-34bf-542a-8f92-04f58b430b87",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9bad7a35-1127-50ad-afb5-4b199e05054a",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4f6affc-4f47-501f-a823-eb29cfb3063f",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89ee51f2-f613-56ca-9b22-2a474469f2bc",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23fa773c-044c-5536-8423-38754fb69bce",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:249edcb9-0535-5c82-8607-170c7cfe8b05",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3293d111-24db-5980-bbd6-966539b38560",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73b12b33-6f16-5ab9-9e64-0398a2affecc",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.21-tuxcare.10 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6768bbc-8610-5267-ac71-a27a5732d643",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f75a705-fa75-5398-95a9-0bf711a2b9fd",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45a2569d-6b24-56e3-9614-3379b2c904d5",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:156af061-268b-536a-948c-f5c08b2fe095",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e495767-01f7-5158-ae58-f20485287a62",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5d0cd55-6d72-5d1f-88ff-eaf4fef75fee",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09ac5f58-8e7a-5b5b-b4d7-70b2cd2506f4",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c0d462f-ce58-54e7-a568-b4eaa91a0ac5",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04b2be02-d510-51b9-8361-6d694a56f817",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.10 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8858fd22-0957-53d2-a8e1-c2f9f3c5be9b",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d882104-c4e8-564c-9508-a5e9d9040835",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68b824d5-2b34-5c1c-830b-a5ef62f8a0ea",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba988a3c-1674-5b51-bb64-9d77187bed3e",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-webflux@6.1.21-tuxcare.10"
    }
  ]
}