{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:bf529c2c-3299-5a6f-bdb7-a9d721928e72",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework.security/spring-security-saml2-service-provider@5.6.10-tuxcare.3",
      "type": "library",
      "group": "org.springframework.security",
      "name": "spring-security-saml2-service-provider",
      "version": "5.6.10-tuxcare.3",
      "purl": "pkg:maven/org.springframework.security/spring-security-saml2-service-provider@5.6.10-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:b2e9d36f-c864-5ab0-b20b-83030ff24c80",
      "id": "CVE-2007-1651",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-1651 affects version 5.6.10-tuxcare.3 of org.springframework.security:spring-security-saml2-service-provider."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-saml2-service-provider@5.6.10-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:960f6cee-79d5-5390-98c5-9e652091e6d8",
      "id": "CVE-2007-1652",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-1652 affects version 5.6.10-tuxcare.3 of org.springframework.security:spring-security-saml2-service-provider."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-saml2-service-provider@5.6.10-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6afb185-a26e-5940-a26a-8b1d4161ab8c",
      "id": "CVE-2020-5408",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-5408 affects version 5.6.10-tuxcare.3 of org.springframework.security:spring-security-saml2-service-provider."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-saml2-service-provider@5.6.10-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a742f82-781c-5118-8ebc-78b61c51f33a",
      "id": "CVE-2023-34034",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34034 affects version 5.6.10-tuxcare.3 of org.springframework.security:spring-security-saml2-service-provider."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-saml2-service-provider@5.6.10-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e44ad32-5577-571c-a992-3bffea58595b",
      "id": "CVE-2023-34042",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34042 affects version 5.6.10-tuxcare.3 of org.springframework.security:spring-security-saml2-service-provider."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-saml2-service-provider@5.6.10-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5dd4258b-4a01-56a5-8800-c56ab56294ed",
      "id": "CVE-2024-22257",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22257 is fixed in version 5.6.10-tuxcare.3 of org.springframework.security:spring-security-saml2-service-provider."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-saml2-service-provider@5.6.10-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50db9d18-bb7c-58b9-adf9-126f210285c9",
      "id": "CVE-2024-38821",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38821 is fixed in version 5.6.10-tuxcare.3 of org.springframework.security:spring-security-saml2-service-provider."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-saml2-service-provider@5.6.10-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f971a7b9-c5de-5994-af67-b55824a0fc03",
      "id": "CVE-2024-38827",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38827 is fixed in version 5.6.10-tuxcare.3 of org.springframework.security:spring-security-saml2-service-provider."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-saml2-service-provider@5.6.10-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ded74a7a-3d8c-54ac-8cdf-0596c6284d50",
      "id": "CVE-2025-22228",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22228 is fixed in version 5.6.10-tuxcare.3 of org.springframework.security:spring-security-saml2-service-provider."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-saml2-service-provider@5.6.10-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f40124b-880a-5f4f-92aa-839e8567d5b4",
      "id": "CVE-2025-41248",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41248 affects version 5.6.10-tuxcare.3 of org.springframework.security:spring-security-saml2-service-provider."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-saml2-service-provider@5.6.10-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4577f2a-a86b-5474-a520-fe6e14a8e963",
      "id": "CVE-2026-22732",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22732 is fixed in version 5.6.10-tuxcare.3 of org.springframework.security:spring-security-saml2-service-provider."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-saml2-service-provider@5.6.10-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a587cbc7-9d92-5e4e-930a-8da24117f52a",
      "id": "CVE-2026-22746",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22746 affects version 5.6.10-tuxcare.3 of org.springframework.security:spring-security-saml2-service-provider."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-saml2-service-provider@5.6.10-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbb7442d-b0f3-51f2-8934-959166f0e98b",
      "id": "CVE-2026-22747",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22747 affects version 5.6.10-tuxcare.3 of org.springframework.security:spring-security-saml2-service-provider."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-saml2-service-provider@5.6.10-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fee20557-a27f-52fc-8b7e-5021a0330b4a",
      "id": "CVE-2026-22748",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22748 affects version 5.6.10-tuxcare.3 of org.springframework.security:spring-security-saml2-service-provider."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-saml2-service-provider@5.6.10-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4395967f-f76a-5a82-b2bb-bdca62afb919",
      "id": "CVE-2026-22753",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22753 affects version 5.6.10-tuxcare.3 of org.springframework.security:spring-security-saml2-service-provider."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-saml2-service-provider@5.6.10-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90b5cafa-6c3a-5157-bc2f-1fc6336b66ec",
      "id": "CVE-2026-22754",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22754 affects version 5.6.10-tuxcare.3 of org.springframework.security:spring-security-saml2-service-provider."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.security/spring-security-saml2-service-provider@5.6.10-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.security/spring-security-saml2-service-provider@5.6.10-tuxcare.3"
    }
  ]
}