{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5aff4b74-41cb-53fc-b46d-8754a432e274",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-r2dbc",
      "version": "5.3.24-tuxcare.1",
      "purl": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:a847f7d2-28ab-5af9-85ab-f4c8e8a1896c",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.24-tuxcare.1 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5107074-8bc2-51f4-80b8-ef3b175eda57",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20860 affects version 5.3.24-tuxcare.1 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20ca88b3-1c2f-5fc8-92b6-cdbf32423a88",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.24-tuxcare.1 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8e328c7-635a-5f33-94d6-04d868d83fd1",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20863 affects version 5.3.24-tuxcare.1 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa40648e-4e9f-50cf-bb5d-966fad146acf",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.24-tuxcare.1 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d2baf51-c2fd-5f7c-9675-4b983195413f",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 5.3.24-tuxcare.1 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8ce864a-97fa-5cb4-a711-69ebf595892f",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 5.3.24-tuxcare.1 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e87b6702-41cf-564d-a736-41f37193e54d",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.24-tuxcare.1 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b135eb0d-061c-5015-8b13-6497c4f7290f",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.24-tuxcare.1 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fce749cd-d01d-501d-9add-d685ad8b9026",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.24-tuxcare.1 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bba94430-bce4-5018-951e-46f753393e7c",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.24-tuxcare.1 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b126acc-c9f6-506d-a3da-2844b360c222",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.24-tuxcare.1 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0cbbbca-c675-5893-b068-6c412565ad10",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38828 affects version 5.3.24-tuxcare.1 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8df29f3-c26d-5e11-9bf9-b0c1e27b4e71",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.24-tuxcare.1 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71f8518a-f52a-5a4e-81bb-01c59ef78253",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.24-tuxcare.1 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b98ffc53-1b07-5f5d-a9f7-a8c525fe20cb",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.24-tuxcare.1 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad082d58-def4-5fe7-a7c5-d5bcb2c41e77",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.24-tuxcare.1 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a84f27dc-3624-53e7-b3f3-6937b4f3b2cf",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 5.3.24-tuxcare.1 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec493f48-69f7-52c5-bdc3-5a5f75c14890",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.24-tuxcare.1 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.1"
    }
  ]
}