{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4410a7ed-b86d-5213-a503-8cd7cf4e33a0",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-core",
      "version": "5.3.25-tuxcare.5",
      "purl": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:999ef51b-f09f-5154-9f69-1a3c5bd71293",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe0ed9e3-de4d-546d-8318-73dca29221fc",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ffb7b88-7e4b-5829-8a2c-2ef57958a2db",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d978dbe9-4a98-5420-ac58-5b123a05975a",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b873bd6b-66c9-5a00-ba03-50d6cf13a9ef",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3855ba8d-7078-52f5-8dc2-b93ef9755da6",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34d50f67-8858-587b-b5c4-6c3d73c9bd8a",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:825beb81-6458-5611-bf1c-5d7e21db38eb",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31277422-252b-59ec-88fd-47a7b7fee3d9",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22b08cf1-4e5f-5eba-bd21-3edbb0e933d7",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61137403-caca-58a9-8cf0-76c5ab05bec8",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9606e08-d46a-5599-8207-536e7c1675f0",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35327cfa-aa69-5c40-80e0-01c9b0566913",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:891072ca-236d-5f93-842e-1f5ca66f54cd",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea725b04-5473-5322-8866-b6134477bdf4",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c82f768a-23c3-5d05-bdba-f493740a8920",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21f77549-ca30-51af-85fe-71300e0fbca7",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1342414f-df44-5b6a-afbb-d31fc63c8394",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c58165b-0297-56bf-bf91-bc35db1c619b",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27ff1731-1f7f-5a24-b741-2f572b09b0a9",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f679fe30-fd4d-5e01-a09c-455ca3b87412",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7441a99e-36c4-5b7b-959d-169ca200717b",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec19258e-3240-56dc-92f3-da280bfcb9f9",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af81a867-a318-5b95-9e06-23eeb2379c4a",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62865303-69ab-5673-accb-ed3b22641120",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb2bc045-ac37-5939-b8de-1250f00e2159",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a662b11-5019-5f8c-beab-6d60c7682d06",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:990f5c26-c160-54d3-9943-c5fb6c7427c0",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39c42f9b-140a-5a3a-ad3e-48b6877e1cc5",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a50aba0a-cdb5-517c-9e70-8c765229712e",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d1a3c87-f8ca-5568-a24b-aac041700567",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3df8a9c-3ea9-50b5-93d4-551c87a5c3e0",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.25-tuxcare.5 of org.springframework:spring-core. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d288fb08-8cd3-519e-bb0d-013bbbdb4a76",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f796ded3-679c-51b2-ab08-cc2b8f6b561e",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86f8f327-f01a-54a7-8a8e-a2a74350e114",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32766d3f-c65c-55ac-b50c-0c5024225edb",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e054f23-f69b-5888-96b8-3ac409871beb",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:106e616b-5360-5d27-a5e3-bd2330c31917",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70fbb8e5-63cb-5fa8-a51b-ebfa005195d3",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb6efb7d-f355-5d79-92a0-bef78de32016",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 5.3.25-tuxcare.5 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.5"
    }
  ]
}