{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:71511ae2-73a9-5285-ab56-76add8b2a80d",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-orm",
      "purl": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6",
      "version": "6.1.7-tuxcare.6",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:8d07a5a5-771d-54a9-b34d-a3d64135be59",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:16fcc4e0-9011-5777-af06-82616a71c3c8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:dd87eb78-dab4-5ce2-92f6-644b27858df6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:983ad49d-8c4c-522d-8235-56eea305b3b5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:9abbabaf-1b89-5035-b35e-4356d9d646c3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:3906911e-0e79-5a2e-9984-b2cd8631fb79",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:50b4c79b-b8b8-5c07-b0d2-ecdfcba55838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:d3f16061-b1ba-5936-99fb-4000a513d4e6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:08ddbe65-71b6-5eb9-8af7-b71d3d44e374",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:a573eed7-7c23-5df4-b0a7-61221e722755",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:3ef75bfd-c562-51de-a7ac-49f94f83495c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:df693c27-d595-5077-9d51-4a9a1c8fef2e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:854e1a3d-b7f5-50d5-81f2-20e5369de18c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:2a680056-2260-5565-8785-4e32c5f4f1af",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:83e3db2c-09eb-5e85-9918-84080bf3fa5a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:f6e124a7-75c3-5507-9b09-3881da58f5e6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:787e1348-c46c-5bd4-9e3f-fd2f1751a6e5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:2bac84d9-d137-5109-9754-853455de7c16",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:40e0c7ac-b1a9-5db2-b236-040e7bc9eeb8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:2d501a47-9afa-50ab-962b-869ce6cfeeaf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:60c88b6c-521b-5b9b-bee3-ad9aa3d08672",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:7f4c7f43-143d-51bd-9e68-ce71810e06d0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:88303835-d8fa-52bb-ae00-65dcf14e9e3b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:25f8da3f-31cc-5ac2-b03b-1e99480846e0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:c75270c0-9c3e-5276-9362-a503843ed62b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:a37c2f59-6380-58c3-9e26-c80235205776",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:fc102552-1a82-58e1-9dc2-c8997656bdee",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:acdc2a02-ed9b-50f6-b2f3-3b177cbd6338",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:8803d05c-5b3d-58c4-8eb6-f4fc13e22e9f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:3a316f5f-6e78-51ec-ba89-2830312a108e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:df0e738a-ad95-5aa3-9165-3c7d8fa07528",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:86987e7b-2fbd-541a-a555-8a6b74738a4d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:70139d4b-1c05-5838-987d-7cceba6678d6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:5bb6b649-83ad-534a-87a6-f9fdc3eaab7b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:c56f1b9e-4991-5e0a-a0cf-3f9b63239d34",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:4c020c43-00e9-5207-9536-81ae164161d2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:fc6ca4ed-e250-5c94-b653-543de06df882",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:c8113fd0-4b0c-5636-86e4-54d05325673b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:20a002e0-d8f5-513b-8f26-5cedb684e1d3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:e48edac6-0478-5a73-a8e1-771d594f4933",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:102ff51c-8695-5ead-ac31-174e7f982523",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:e6f28b06-3ff4-5db5-bca4-8df50b79cbbd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:a5847bee-6a91-5080-a9b0-13c9a2d77d67",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:dfe57b1b-57e8-535d-abac-a0c4f45127fc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-orm."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.6"
    }
  ]
}