{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:3d7f8d40-be23-552f-bfba-39385a62186c",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-orm",
      "purl": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10",
      "version": "6.0.23-tuxcare.10",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:ffb66ebd-82b0-58c0-8933-6a5d572f81aa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:c2c75825-8af6-56e5-89f6-c61bca8b7207",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:f8c44d16-a01c-5464-bcaa-a45c98c5b539",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:485506ea-ef93-5c94-a94c-542d898315e9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:2f661e10-202e-5d71-8197-75588d048772",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:82aa36fd-b429-5acb-be85-adeab19d7ad3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:5aeb7fa3-c888-53e7-a57a-9a1b2b083dea",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:339f9ce9-34b1-5a41-87d7-764a789f0a77",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:1ea6ad67-247f-5d24-a753-e53f8e48c80b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:4c36dbad-59f3-5d46-8f6c-6f9b1051dce2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:87949b19-c52f-5e78-b9b0-43bc57b19661",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:eacf26d8-3587-58dc-a55e-ec9124660fa1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:6f361497-75e7-5e5b-800d-fb229ca92260",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:48459d1d-7cd3-5f0d-9f53-efb15bf8de49",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:81b4dc83-e846-561c-b960-1b72d03ec730",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:52f29a33-1b19-59d7-bda7-eb0ca1d730f0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:1a771a87-f791-5c33-a470-d4e4cda60444",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:71fb4885-d89f-5d26-a360-5b78f0ef2197",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:30d3a263-7e65-528d-968c-2427fb5325de",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:4270dca3-3284-59cf-a3f9-f500517e171c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:3aeccbb0-437b-54e4-9fec-49dc13a34e29",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:fdbf6e02-ffdb-5348-8e75-295b2b910b85",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:80aaf671-2784-5764-a329-84206c7f911b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:646f565b-a7b3-5fe3-a5d5-a70336f66324",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:cd9ce0e1-a49c-586a-b411-e54b52278844",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:2d2a7314-43ec-5c0d-bb07-c3e43c7e5b78",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:a7162ad5-9b0c-5e5b-b5e9-68f17a610365",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:b9e53d51-5e4c-51b4-8f24-3fc24bab512f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:15def207-47cc-59ce-9b8a-be9d13debc65",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:03e894cc-9247-5725-a1a7-478dbb0e70c6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:0bdd590d-65a9-5d55-8d4a-593acf7de161",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:b2ce05d3-fdd0-5524-9d04-06f43f0d78f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:234b1bf4-37c1-51e5-9c18-29afae2beda2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:9d98d98d-f997-5a3c-9d09-8d439453a903",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:fc4e1e4e-281c-55bb-85fa-0ff073c69075",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:0999c68e-1541-5918-9cea-7828dff592a0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:b51c0e87-eab7-564b-be01-d97da6409410",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:a7aefee3-6f38-55a5-aaff-753f96007681",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:940c2e40-98ab-5052-8d2a-7abffddfe405",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:61ff65df-da99-53bc-9872-7cdab52827bf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:df84abc1-b9cc-5588-b034-35d9782b023f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:eea599a4-75c0-5857-9c24-14394ae4e527",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-orm."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.0.23-tuxcare.10"
    }
  ]
}