{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4c265692-622a-5ebf-ae4c-5c153a73b160",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-orm",
      "purl": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5",
      "version": "6.1.19-tuxcare.5",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:958fb52f-3895-5fb2-ab61-e54e98cbc76f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:f8459714-f2bc-58e3-88d6-a26eeb24fcd9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:6d23a8cb-1d6b-5e19-b59a-6cbb1dd2d623",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:06457417-23b2-5c1d-be21-1f97e57c9a8f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:c0a1b604-44f9-504f-81e7-65066b80b7ec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:b249a04d-8d68-5572-ab07-96f6bec49030",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:f0cbedce-ab85-5853-ba75-9a741a449e79",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:2dfdcd4f-7199-5456-858f-80615f890cd1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:e17e85de-e2f2-58e1-80d0-5ad624a0d47e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:e0f53b84-dca5-558c-ae3d-256d3eabb293",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:f805c4ee-837a-5c1f-aa0d-311f7de3085c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:76f3d0ad-5f50-58ce-933c-d2394a7720b0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:129da4bf-82fd-5a0b-bd6a-21d994a30b2b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:d91a0e13-173f-54b7-a496-05d318738b30",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:4f713f83-e758-558c-a567-5de6d7d4564a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:12124a14-bf0a-562c-94f7-f4147428ed3b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:82effa4b-9b02-587e-9c6d-63dfa2027eb5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:e71695d3-bab4-58f4-a7d2-6d5a26d618bf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:26f0699a-a55c-56ae-94b2-7176766ed1b8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:e8602b46-2511-56f3-a259-941bc875d3bc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:a737898c-b0d4-521c-8b6c-36a8d32fa595",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:b1a92860-8e89-5409-ac6a-55efc487c5e5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:cf0274a6-5f40-547d-bf00-5f6bca473596",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:f40b38e5-d59d-5826-8239-46a6e09c8b5a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:996ea0f4-229b-52e9-ba12-9e6393caf04f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:1e9c3c95-020b-5aa7-8d4f-480c5da0131b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:35f6bb6f-4e40-5b3f-981e-5f0be80208f5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:c713809e-562d-5906-8175-7fbf172aed0a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:7170697d-cd84-5ec2-bdd0-b530cb501e4a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:129530a3-36c1-54f0-baac-9f18cffe1014",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:ee0da791-75a3-5dca-bbac-6b6b96b8b24f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:f29d4045-2fd6-5e0e-9f78-6feccb95c48f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:eb866734-e0d4-59cc-bfc4-65ca03b3156d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:e76e78e9-60bd-562b-a6fc-c721ab916123",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:4642cf27-47d9-5468-b04a-7be9a2cc962c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:c2e66af8-a01b-50d9-ae3a-cbcf7234c7a1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:61caafbc-60d2-5f30-8f6e-b361579c9f0d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:7c9af7be-cf74-59db-8cdc-c3b01bf60e86",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:035debfd-bd50-5a54-93f2-412f232cce84",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:ff8110d6-3e77-5e7c-8fd0-12eafdd11046",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-orm."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.1.19-tuxcare.5"
    }
  ]
}