{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1d08780d-3a53-5d3f-87c2-336c95531625",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-core",
      "version": "6.1.21-tuxcare.10",
      "purl": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:a4ae9208-f59d-5794-8309-0b5c9176af20",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.10 of org.springframework:spring-core. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82af051d-697e-55fa-be63-b2417e25d92e",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34b18e62-df1d-578f-b784-d8f1162d4a71",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:641c3fe0-331a-5eeb-8653-5f69a8e3c0d4",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80873540-5383-5eae-841f-785db5db54b2",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c398ea7-42c5-50ee-9927-391425dff6d7",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.1.21-tuxcare.10 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3485b9d-6281-5281-a72b-2b9a65e9265c",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4350d74c-a66d-5abc-9249-16c1e6d8ccfc",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24d6e905-ab2b-5bc4-9caf-744db2ac59cb",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37e7185d-ac80-5986-a1a5-444ceab30ace",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ec22c44-d056-504f-97cd-df3f68d8f1ca",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8dce65ce-b95f-5d50-b551-bb8698517ff4",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.21-tuxcare.10 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42706c9f-1fb4-5342-8db4-2cbe5d59a20f",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61bc48e9-c076-5a94-8fd3-d9498257c7d1",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d21758d4-74c4-5de3-8bd5-c60791c331da",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49a0d546-01f5-5f06-ab62-5a26bcda4be5",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:677e0f0a-9a79-5779-88b3-3a725c15beac",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2cfadce7-f506-5d0c-8115-41db83175e7c",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7637eb4e-8056-5eb6-8420-0219c71df87a",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3ca59c6-b05b-50f0-b1de-ec03baa89369",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a687270d-8288-5964-a344-8bb37e54a4df",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.10 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76f64236-7395-5f7a-a416-70ff5c17d468",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f95c782-0cab-5ed9-a25e-648ec80bf024",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d411430-a735-5e28-a03a-41c3a953f7f6",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bd69a9e-f9e7-5b66-bd77-96ea219bd134",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.10"
    }
  ]
}