{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a566ee6e-a2db-5b79-b0a2-811108a27fc4",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.31-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-r2dbc",
      "version": "5.3.31-tuxcare.3",
      "purl": "pkg:maven/org.springframework/spring-r2dbc@5.3.31-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:0acce45a-bcc1-5279-ac95-58e15f87a825",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.31-tuxcare.3 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.31-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:569b8da8-9117-53fa-8552-69521ae7ccbc",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.31-tuxcare.3 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.31-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a1d4b9f-5e92-5426-a0ca-92e4dace6e9b",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.31-tuxcare.3 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.31-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7a47112-e835-5196-8ad8-508199c14d7a",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.31-tuxcare.3 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.31-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1279fc1-5e24-538b-b570-453f355d2646",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.31-tuxcare.3 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.31-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1107c967-126f-56a8-9dfa-c25ef1885b8e",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.31-tuxcare.3 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.31-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34f17a03-f189-5138-b6eb-4efc3d852cac",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.31-tuxcare.3 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.31-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ade5fb4-f9ab-5055-a0cb-0ae83d3076aa",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.31-tuxcare.3 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.31-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fab5d63-948a-571b-9a51-b7e7bd37dc0c",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.31-tuxcare.3 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.31-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0402c035-9ccd-5d8d-a24f-bf3e14fbbe64",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.31-tuxcare.3 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.31-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61eb9783-fbeb-51d3-9bd4-6936451262ae",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.31-tuxcare.3 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.31-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a5496a4-8582-531d-ba39-c2d961d0082e",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-r2dbc 5.3.31-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.31-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa5e3325-4103-5f1d-aa73-3e0d9e3495c4",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.31-tuxcare.3 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.31-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6fe2a019-ea55-5bc2-98b4-61fa93d41c38",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.31-tuxcare.3 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.31-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73e88964-a8ca-5d79-b5a1-aea8b6c8750a",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.31-tuxcare.3 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.31-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce9348fe-614b-586d-aac5-db2d9ae05988",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 5.3.31-tuxcare.3 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.31-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d926cf51-7b3e-5c2e-9caa-75109f34ea61",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.31-tuxcare.3 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.31-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9c59bcf-e1fc-5b69-897d-ed69c7d2b9b9",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.31-tuxcare.3 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.31-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ede84600-88c1-52d2-9e6d-cdab6b3cf362",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22741 affects version 5.3.31-tuxcare.3 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.31-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ba1deed-ea88-5e39-acc7-8105634f8289",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22745 affects version 5.3.31-tuxcare.3 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.31-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.31-tuxcare.3"
    }
  ]
}