{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:70c90fc6-a442-58ec-a243-8ac04d88a42b",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.4.6-tuxcare.6",
      "type": "library",
      "group": "org.springframework.boot",
      "name": "spring-boot-actuator-autoconfigure",
      "version": "2.4.6-tuxcare.6",
      "purl": "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.4.6-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:cab55917-9020-514a-b250-fd0bdeb4baa4",
      "id": "CVE-2022-22965",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22965 is fixed in version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-actuator-autoconfigure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.4.6-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3cd9257-05bf-5d11-9e48-97e95658f318",
      "id": "CVE-2023-20873",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20873 is fixed in version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-actuator-autoconfigure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.4.6-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ef1a41e-4bd5-57ff-a58a-1e142ae94167",
      "id": "CVE-2023-20883",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20883 is fixed in version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-actuator-autoconfigure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.4.6-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7572f6cd-9015-57c7-913b-f5ad7a2d6a16",
      "id": "CVE-2023-34055",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34055 is fixed in version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-actuator-autoconfigure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.4.6-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85bec4e5-bc91-57ab-8d02-95c03fa9d138",
      "id": "CVE-2023-38286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-38286 affects version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-actuator-autoconfigure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.4.6-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da8523e5-43ba-5ed2-b2ff-89b2b0bcf333",
      "id": "CVE-2024-38807",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38807 affects version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-actuator-autoconfigure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.4.6-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85194f2e-312f-5356-ad2d-5fc54a9763aa",
      "id": "CVE-2025-22235",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22235 is fixed in version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-actuator-autoconfigure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.4.6-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20e06b77-0363-5030-8f1f-34879ebb67f5",
      "id": "CVE-2026-22733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22733 is fixed in version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-actuator-autoconfigure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.4.6-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba9debdc-27d7-5dc3-87f0-26759e479b65",
      "id": "CVE-2026-40972",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40972 is fixed in version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-actuator-autoconfigure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.4.6-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36838895-300e-527a-8134-4596d24bcfe9",
      "id": "CVE-2026-40973",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40973 is fixed in version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-actuator-autoconfigure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.4.6-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7230a98d-4e4a-571b-8d23-a828d4442a6c",
      "id": "CVE-2026-40974",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40974 is fixed in version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-actuator-autoconfigure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.4.6-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ea18855-b8fb-5414-b8eb-6e12700508db",
      "id": "CVE-2026-40975",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40975 is fixed in version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-actuator-autoconfigure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.4.6-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e520d25-bedb-5e6d-963b-84ad161a5906",
      "id": "CVE-2026-40977",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40977 is fixed in version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-actuator-autoconfigure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.4.6-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:912c2dba-dc4f-5692-8340-910bd96d200f",
      "id": "CVE-2026-40992",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40992 affects version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-actuator-autoconfigure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.4.6-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2cfe09d8-f038-51de-8d79-1f65929537f1",
      "id": "CVE-2026-41001",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41001 affects version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-actuator-autoconfigure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.4.6-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.4.6-tuxcare.6"
    }
  ]
}