{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:80e13552-f4af-5dce-bf77-cc50ffe7b8bc",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-instrument",
      "version": "6.1.16-tuxcare.1",
      "purl": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:182c4eba-740f-5fcb-a43e-4e2d169ab9fb",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45aa81a1-7ed5-585a-9e31-5e024f92634e",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41234 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33f4e8cd-d56b-55a1-bdb2-6e57835a1a01",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc014ffb-c84e-5e65-950b-39375230d171",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9333a00-6ae8-5b73-94f5-b976d44b5cd3",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dab8c964-03a0-54e1-92a7-2b0ff2125fa9",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04020ed4-8fec-5df8-ac01-adac6949d4df",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:295f6c6b-f7ce-5f3d-a1b8-8c28fabd7f80",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72e74c79-6bf4-58a5-9a97-693c918df0a2",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22741 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df6b4abe-58f5-553b-96e2-03d731b5d0dd",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22745 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83e62f20-3ea3-5e99-a16d-580d2b3e36a2",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c9c994d-705f-578d-acfe-56b575bc5714",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d69b6466-6fab-5470-ba19-a4c331efbc4e",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:858b6692-fb33-5868-a1eb-2c2646636218",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b2ee313-f737-54a1-92b9-ae1e4785faec",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2fb5047-feee-53c7-9df5-8ffadfa71131",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:087b4758-26e0-58ac-b9f1-8f07abe9e019",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41844 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2ab7429-01ed-510e-af04-b1c09934fc68",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41845 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0695833-32ce-55bf-8568-bf955d5f67ec",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9d10910-7c45-53d3-9561-a7794b79b56c",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a616b06-9586-53ca-8328-d9d564f8a9b1",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:132e9c6c-b058-534e-a959-642a88a88d55",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3573bfa5-3e15-57bf-a8b1-1dbc56e0039c",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:deb21534-84b3-5fa4-8b00-679f694cb71a",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e6edce3-5517-5383-b2fe-a2bc063cd23b",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.1.16-tuxcare.1 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-instrument@6.1.16-tuxcare.1"
    }
  ]
}