{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:3541776f-adad-5b2c-b073-4ff04ae193c1",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-web",
      "version": "6.0.16-tuxcare.5",
      "purl": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:1ecaae1e-9979-56ad-bab8-6ec0103a4737",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edb577ed-ecca-556a-94e4-807091a94bf0",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92240544-af18-54e8-a78b-1aff097f347e",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e53fbf8-69c4-5de7-b450-87d5b7d8a783",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de6d54a7-86f0-514c-bb0e-8f4a9aaa18e7",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73cda991-6ff5-5b28-b87f-9ca401bfa96b",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab24644f-54b9-5fb4-98c9-c173dd5162a6",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96e0dc2b-9774-559f-8de5-6e8c1fd66d8f",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e45d974e-ac64-54f6-b89d-f27be0a4bea0",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe0cfc4b-cacd-5b42-ab77-ce36fb41c868",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd2e1e85-4085-5b98-9354-0e1ded9678ff",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6c5feb4-d6c0-5c4b-b96a-d7d98a8db1aa",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6531efd-c71f-5abd-8063-a38f16f3e880",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d6b2929-0b66-587e-814e-ed3b9d4d7a47",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0a30f4b-28f7-5267-8b19-64d82c62d836",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2a2f36d-d4a4-57e3-bb64-ecdaedcaf29d",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33ef2b15-6c80-55a8-b56f-83f32e8fee8a",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3a98475-14b1-50ad-beb1-627cebab613f",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c102644e-d10e-5cf1-8aaf-b880ea7a9205",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24d4b4e6-4c95-5ec6-980e-23658d4f917a",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c8d2b27-4fd6-58a7-a5cd-1b470fc67332",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a075eb3-bd51-55b3-9b5d-5c1a7133c2bd",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2eae6186-1b11-5074-94e6-41346744f738",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b66de495-616d-5579-baad-3b685c087bcc",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f37d221-1a3e-569e-bd37-44dd274688f7",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2aee333-8f78-52f3-ae68-ea011e5dcfcf",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bc87cb7-4635-5358-9523-e958be192600",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:951a509e-a7fd-5fcf-97ae-a9fed869335f",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d35f9842-d563-5731-9d2b-be2ad03b40ad",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfaf5b63-58a5-570e-bcd7-658b39fed3ec",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3aca2d9e-5f3c-5a74-a097-5bce382a0ad6",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2a3926b-39e3-5db7-a198-d08d16faac6a",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.5"
    }
  ]
}