{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:04c55119-c382-56a6-b82b-11f0b48d80b2",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-oxm@6.0.16-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-oxm",
      "version": "6.0.16-tuxcare.3",
      "purl": "pkg:maven/org.springframework/spring-oxm@6.0.16-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:1e153328-eb68-5706-81cf-82ee61db6cff",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.16-tuxcare.3 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab2aacd7-c5b1-5d46-99a3-d12906125d7a",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.0.16-tuxcare.3 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5cea369-32f9-5f39-8289-f2e42bb7ce7a",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 6.0.16-tuxcare.3 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a80d0232-53b3-575a-a8c3-ad35c21c32c1",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.16-tuxcare.3 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5096e07c-c71b-54b4-911e-1f623fb5ffe2",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.16-tuxcare.3 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b924589-74d2-5e0a-b8e3-337a7ce2a102",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.16-tuxcare.3 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e98f91c8-82d6-5923-b037-fcb2cfac20b3",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.16-tuxcare.3 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:016621da-00c0-524c-ae6a-cf43aa6c225e",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.16-tuxcare.3 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e68672a-21a0-5769-a162-eba319989aa0",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.16-tuxcare.3 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:070cb489-6a09-5e90-a08e-8740184a8d98",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.16-tuxcare.3 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4f4e5a1-7ccd-5207-b068-944267f393fb",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.16-tuxcare.3 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94539153-42e4-5701-8fea-26990b0737ea",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.0.16-tuxcare.3 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7661fa39-a77a-574d-b994-cc3ce01b0425",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.16-tuxcare.3 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1376df3-6102-5d65-88a3-3b71b8e51fd4",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.0.16-tuxcare.3 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e08d4bfd-7f09-5857-8b63-8fb2fc663593",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.16-tuxcare.3 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:abf3501a-4b27-5498-ba26-e7ad805e5729",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.16-tuxcare.3 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f4d7cd0-0ac5-5f20-8c8c-622734ca6f1e",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.16-tuxcare.3 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@6.0.16-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-oxm@6.0.16-tuxcare.3"
    }
  ]
}