{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d7defe26-0cf5-51a7-9815-78e7060af086",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-websocket",
      "version": "6.0.23-tuxcare.3",
      "purl": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:e93b909b-42dd-54a9-836e-fc8f7bb7ac0f",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38816 affects version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a92d1a6d-3b42-5356-b67d-5fa744bb7213",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a002e3a2-ca63-5b7e-bae8-08591ec0cf05",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:577be103-d150-5cd7-b4f0-af1aba8b44f1",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68e85a49-797f-5080-bc0c-97b006aa79bd",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6199586e-fd8a-50a5-9d1e-14398bdfc7bd",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b330ba51-2b95-54bd-9f47-4ab67e9a8f80",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9e1afaa-6970-51df-b899-7f97a43f659a",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4625b2e-0328-592c-9cc2-50e86cbf6844",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d9b4eb7-42d9-5b3f-b73b-f6e138ffb455",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af8d592f-1b6e-5146-89dc-f90dcfe81cf5",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d07c576-c847-55d4-9eea-663de63aacd2",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c32c092d-fc71-5d27-8ca6-844260011c56",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22745 affects version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c615873-4852-5a41-8fe4-c4c536583ab8",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32dcc1ea-aaac-50fc-8d99-2fc26faa4dec",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0f784ad-b4b7-59c6-b7e5-8f8a446c2925",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5384016d-51c9-5962-b6dc-e914853ba4d3",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e35b03f-c162-5f56-b0b1-e67911d386f0",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:652e82f7-79d4-5299-879e-642d96ff8809",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41090f69-8b15-5a71-b17a-53366d1ec9fc",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41844 affects version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15864b04-2a27-5b7c-912e-f41598c299b7",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41845 affects version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c93873c-46fd-5269-99a0-81833614c1a8",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ededa564-d220-5569-8f46-6b233427a89a",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84e47613-7455-568f-bb76-0f9a991b6278",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:516c423e-398f-5a9e-be34-fd0e940a3ca3",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2694dbbe-d29f-5532-915e-2433a9e9cbf4",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b50d8398-f259-55ee-a253-74c8f2d2f47d",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49d10d34-c7fc-5dac-920d-8d57f4f220a1",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.0.23-tuxcare.3 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-websocket@6.0.23-tuxcare.3"
    }
  ]
}