{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:58529f05-fc04-53d8-bc16-e709e23954c2",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-orm",
      "purl": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1",
      "version": "6.1.18-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dcb47b75-bf3b-5ede-a23c-6fc9b18299dc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:019c3435-42f5-59f9-abcb-78086bc3f0eb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ea784988-c475-5c12-a029-9e5d3258a8f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3b4fb7fc-e5c4-560e-b9f4-6448386beb63",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1e8a92c3-1653-5199-9aa9-bcf22843be74",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9c88fc0b-5ba1-5a95-868a-5935f69c8cea",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1b8095d8-73c6-5f1d-8121-8fbda56c56f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1f122d0c-a3ab-50c0-baec-91a1f00a029c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2de42d85-5de5-57bb-866f-349226b63457",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1c84e4d1-de8d-5680-9995-4ccd6998fbeb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8250fbd4-e665-5662-9aff-689e02ea156b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4a59d9e5-9617-5928-9185-59c0e103cf28",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d68092a0-a4a3-5d65-9a7f-0426a52de930",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0886942e-d7c7-5841-92f6-f9a6d1e4f27e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4eb4b92a-0ffa-5912-a435-5c04dfb4be6e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:33c275a2-a70e-5deb-a327-d228caf7a3ab",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4abc11a2-cc39-5f72-b9f3-5578ca7fc8eb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5a62b989-9a76-5f57-8098-e07dd3292090",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:583fa00f-f107-50c1-babe-bb6dbe68a1dc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c3a905f3-c95b-5481-b0e4-6e1451c55b10",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a1882942-838f-5491-89b1-4efc6d8e813e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:820809d5-5282-5de0-9e93-f28ffeaa8cd2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8f176931-4df0-5714-ac23-4555e0819c74",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:01ae0ca0-059c-5bee-8d39-ef8f3c5cb3f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:45f68158-31f6-56dc-8e63-f17df9cf7af3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2828f458-baaa-5d68-b93c-ad9c95161c33",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5e6a044b-dd62-558e-b892-5ba81b8cea9f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:78006e9e-2746-5a1b-9e71-259db63a5dd8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:15cf64f5-d43a-5acb-ad8d-236bb6d0efa3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:49f380fa-892b-5594-847c-61c098b4fc5c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dc0e5b13-fc73-5c4b-a36d-133a2f50278c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3d5cc911-dfb1-51b8-94f6-1e0ed01cb367",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1f5336a3-98c5-5393-a01c-41c8ffbf87d0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f522c71f-9480-51ac-a82b-bbd346be3734",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ae10c0e5-1e46-5a46-a87c-6e0bf918619a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:63ab86c1-1a21-550f-80d6-1c179b3ea997",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7cd19c8a-6491-5970-8697-49fcfc852e31",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5cdf6246-d5e7-5cf0-88d8-f2cd1d272235",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:636e126f-90d7-537e-ba78-6383a5223a8c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a8aa770f-95e7-50b9-a186-e3cffc426ed5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-orm."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.1.18-tuxcare.1"
    }
  ]
}