{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:745f8a09-1a9a-52c2-959a-43c3301e8ded",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-orm",
      "purl": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7",
      "version": "6.1.7-tuxcare.7",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:5a6521e8-27df-5284-bc47-33cf7177c5df",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:c2f65198-f6c4-5211-8a32-e82bfd480fa1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:542630c5-662b-570f-84e9-eef9c8aefb2b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:c63bda7e-bc93-59ec-8d66-adfc4b1045d6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:fba7efec-6873-5758-b7e7-0753cbc04e35",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:eb005d4a-a825-5092-bdc4-d6ebdeaf8e7b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:28cbd5b7-2ac8-5a51-9b8b-6b23ca50716e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:0d3e6150-cdb5-5804-99aa-7811c44564f1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:1edec024-233a-5ce8-9873-32bd611d4c07",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:e04f6ddd-caf1-5d33-b221-c373fd55341b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:33228b6a-2f65-5780-8004-49ccd668029a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:0a93c6b5-0297-52d9-8722-b871cf57ead8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:b3cbc345-ce4d-559d-872c-f4d2e4bfa732",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:99e8f613-3de3-58a7-a10a-97699f4d60ac",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:a3decf89-de72-52e0-8a7d-eb258c7ed7f5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:5dd558c2-4fad-5a83-b88a-19c38b776810",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:f4591a4a-9bce-5ac7-b202-7d9d228f7d83",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:1280f268-5568-5269-a65b-883727dc6dc9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:e2639adf-daff-5ddd-a5b2-b3f22bceb7d4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:64729a01-a259-5d8a-a70b-dc0cbb9a0e25",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:2869b6a9-f15b-5576-94aa-de1f0ad21250",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:6307f283-0de9-54ef-9968-09ad5958ec1b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:010d82cd-2356-5e15-9a67-7762ae5b7a7c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:fd55e145-63fd-53b0-8a43-1fe659deb6fa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:c7a87d26-7635-5495-9522-3dc0bf41b954",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:9e67fcb3-3528-59e6-984e-2fed867accd8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:fbb377bf-88fa-5b04-aabd-7702cfb8b01a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:f12b2643-b747-5800-be7b-bc4758b21865",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:cfab237f-6149-51f4-afe5-87ae92698051",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:2f719d70-4dcc-58f6-ae05-db0b637b07dd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:976efabd-2e72-5750-9f4d-9f0f0427aedc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:766c6f38-94fd-5ab9-9f0b-5a5d7c90aec5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:932df29c-9926-5bc6-bb9c-128927100fe6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:f9f5fe2d-acaa-53d0-be00-5cd044b8416f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:3f33fcac-675f-5d2e-8a92-8c7e81154d85",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:cc389def-befc-509a-b30e-d06f42e89202",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:071be8bc-ccc9-530b-8378-e375155a216b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:b51a9d15-77f6-5b26-8f55-7cbe62df63a0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:83d8956f-631f-52ae-a61a-ce13f7a3f553",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:9cd5e1c7-9ee8-5793-92b0-922077157453",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:9fb2a320-d5ec-5d20-a6ee-cbec5a854600",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:76dd9e83-0cb0-5dda-a8c7-1781f8e739a1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:514ad8de-d807-5b36-b812-0779253ab0d9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:c98e94b2-45d8-5be5-8d79-9fd8d4d957c7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-orm."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.1.7-tuxcare.7"
    }
  ]
}