{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1abba8fa-8276-5ad6-b8c0-69bcccc3b8e6",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-orm",
      "purl": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2",
      "version": "6.1.14-tuxcare.2",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:35db1158-dec3-5a67-ae11-fa4a22f499b9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d03e5f6c-d6c1-53d8-af86-430e40780516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:03f91318-d873-52cb-ac47-78821c8933fc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a5c276a4-8ac2-50c1-817a-3ec0a08269bd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1723644c-e2e4-57cb-b797-fdea9596e013",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:eeeb8ccc-8168-543a-b77f-0c8f391cf7ee",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f0470396-93aa-5cc1-8652-9a0ab38363b4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2207180d-4009-5f3b-8e03-32c9cb9e98a8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:402a8c8d-59a1-5f7b-8f20-3693a41ec15c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f6555edd-ae5e-5110-bc70-27fb464d624b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7c03a244-5e9c-5ec5-95ed-3f276e4d4917",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0e83ac0b-3771-5b5e-b085-f15217f9f9ab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8c98f631-141c-5f27-b9bb-068c99e1b086",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:cf613f27-8381-518f-9a64-dcc502b8c5f6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:57e1803e-5dd2-51ab-a4c6-0876a929f363",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:137761e0-388b-5f15-bc94-52232d97cf98",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fc866d64-d894-5f04-b271-f3b43f5bb552",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c47a4168-9531-51ba-bd04-e8b3008114d4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9223b8b0-05ff-5762-8a60-ce8280d589f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0e3e80d9-c954-5809-b667-f2ec0ccebe69",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e70ec774-2dac-5cad-8d66-7d92f717c9cc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8f9ed034-7469-53f3-ac0b-890a36824f12",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:51211f12-38c1-5988-8d06-6b9fda231245",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3e4d0736-f60d-5016-b5ed-71c6fbe9709f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:343f1125-df9a-5a59-af26-a0a3f37028df",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0e4a384d-4b20-58f1-81a5-2b8c17abd6b7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:249d62a2-ebad-5043-ab1e-767fe97c92c0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:351ce207-c4f3-51bc-8dba-d182ec183b7c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:22717ef0-8434-5626-8727-7100f65ce4e3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c9425db7-5212-53a5-b85c-3167f8c41819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e144c24b-ce10-5084-8f0d-b8f178b30d64",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9ee468cd-b4a3-5af0-9550-8834be9d134c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:82791301-53b8-5cfb-a210-fdd3e29aa709",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fb17e881-64ec-5bde-8179-ec8ea37c8b38",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bc902549-63ab-556f-94da-923cf8d6828f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:cb481e3a-ee0c-51f8-81b6-184cc98a852f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1ca2234f-3ddd-512a-907e-4b20be024096",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ec9873be-147a-56e2-931d-23417bb27338",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:82609229-cdb0-5766-8555-82f92d5de92b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:332bee1d-beb5-58b1-970e-63cfdb8bae18",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-orm."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.1.14-tuxcare.2"
    }
  ]
}