{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:bb98d25a-c203-5ac6-9c54-9b8778d845f6",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-orm",
      "purl": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1",
      "version": "6.2.14-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8b5ea60f-3915-54ad-bd23-f8dffcc3b3c2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:106032b7-c97f-5f2a-a2a5-048aab523ca1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7ab40e98-b5c3-589c-a1fe-0157f5bf3583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1d48b378-4350-56a1-854b-5e738c2ca9dd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9b4e4679-cfb6-52e3-ae1c-9d7edfe9340e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3ec3f81f-a8af-539a-840a-f442ec840601",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aa9f0b1c-0682-575c-bd04-8701db2eec7a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6c6dab3a-6f6b-581b-91b0-c42170e50be1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:14345d4e-8995-536e-8a82-4c23348855e2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a48116e3-32ab-52e7-98b7-7db7785c21f9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9a2dc41c-f163-5e04-97b5-6c903eeca2db",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6427ad6f-b5fa-555b-b8b5-d91c2cf389f1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9c684a25-d7af-53c1-99c6-a2c8a231fe15",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3a48730b-fcaa-5a2b-9289-fe2df2472398",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0fc08ccf-6c09-53cf-ae79-03a8c4676b45",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e9f739c7-b09e-5d21-a872-15273a7e9017",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4a5db862-409e-5721-8777-bd7fa0c01715",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1d2dc0aa-7dbc-5eca-998d-517ee9c8fdfc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:58b1f27a-8bd6-58e8-b37d-91ab56b3d900",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d5245f2f-718a-5dcc-a7ea-9fb7e4878f76",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1a9257dd-a962-5212-999e-373b9903660c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e47a5ad8-3c5a-5d90-be5a-937c01ed5102",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c4358046-fdb6-560c-9e34-c0230c22778d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f474d069-e198-5f3f-97cf-50d10d16c0ac",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f492d891-522d-574c-aae9-7f4f21224efd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:215b0689-6ac6-5aa9-b557-c740d8d44ec1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d93862ce-9a0a-57fd-80dd-c63f6bb56fc5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:02127e08-3921-5a27-9ca1-cc3aeecb546b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f6777d9b-1251-5b4f-b871-70d972077003",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:eaabcc81-782e-5f89-836d-b1631f24d931",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:91256b5e-4787-5766-bf82-e1ae2a6c9dca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a073e51a-e9ba-50b5-b561-3cc74ce5cb80",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2e600854-72d6-50db-ad85-d22c9cbcd66a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:80cffe45-ca77-532f-9ce6-8d83584a716c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b26ed4a3-d62a-5633-bbb6-1db15b45dd87",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:438c0eb3-2972-5ac1-b75c-9203b3b5f18e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0a6736eb-f24c-5b22-a8fc-0d742c19d5f0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5f8c23ce-0448-5355-a269-75bbe75b6fe1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-orm."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.2.14-tuxcare.1"
    }
  ]
}