{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c6290831-d45f-5864-81ea-448780a05837",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework.boot/spring-boot-gradle-plugin@2.6.15-tuxcare.14",
      "type": "library",
      "group": "org.springframework.boot",
      "name": "spring-boot-gradle-plugin",
      "version": "2.6.15-tuxcare.14",
      "purl": "pkg:maven/org.springframework.boot/spring-boot-gradle-plugin@2.6.15-tuxcare.14"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:b127d3d4-c311-55cb-ab53-89229e7388fd",
      "id": "CVE-2023-34055",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34055 is fixed in version 2.6.15-tuxcare.14 of org.springframework.boot:spring-boot-gradle-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-gradle-plugin@2.6.15-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58f82ca6-bb8f-515c-8fe2-95052282cdb1",
      "id": "CVE-2024-38807",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38807 is fixed in version 2.6.15-tuxcare.14 of org.springframework.boot:spring-boot-gradle-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-gradle-plugin@2.6.15-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b009915-df08-536b-8699-3a6669c6f13a",
      "id": "CVE-2025-22235",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22235 is fixed in version 2.6.15-tuxcare.14 of org.springframework.boot:spring-boot-gradle-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-gradle-plugin@2.6.15-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c64dde2b-8609-5b4a-828c-f81762c9ae18",
      "id": "CVE-2026-22733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22733 is fixed in version 2.6.15-tuxcare.14 of org.springframework.boot:spring-boot-gradle-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-gradle-plugin@2.6.15-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2ab44c3-03dc-56f3-a9f0-3d5758068bf7",
      "id": "CVE-2026-40972",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40972 is fixed in version 2.6.15-tuxcare.14 of org.springframework.boot:spring-boot-gradle-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-gradle-plugin@2.6.15-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c96c916d-09d6-5d7a-914d-cba7a5496d33",
      "id": "CVE-2026-40973",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40973 is fixed in version 2.6.15-tuxcare.14 of org.springframework.boot:spring-boot-gradle-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-gradle-plugin@2.6.15-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0061a5b8-e8b1-5021-841d-c20130609e29",
      "id": "CVE-2026-40974",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40974 is fixed in version 2.6.15-tuxcare.14 of org.springframework.boot:spring-boot-gradle-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-gradle-plugin@2.6.15-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9be2bfb-3cc6-5ff0-8c48-728ab251be3d",
      "id": "CVE-2026-40975",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40975 is fixed in version 2.6.15-tuxcare.14 of org.springframework.boot:spring-boot-gradle-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-gradle-plugin@2.6.15-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76c788e1-0364-5570-ab33-b389df121315",
      "id": "CVE-2026-40977",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40977 is fixed in version 2.6.15-tuxcare.14 of org.springframework.boot:spring-boot-gradle-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-gradle-plugin@2.6.15-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04bb0d37-5d04-58e6-a049-c01ba3bdc583",
      "id": "CVE-2026-40992",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40992 affects version 2.6.15-tuxcare.14 of org.springframework.boot:spring-boot-gradle-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-gradle-plugin@2.6.15-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a86b3a94-a08c-545e-83d7-b71bebd44346",
      "id": "CVE-2026-41001",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41001 affects version 2.6.15-tuxcare.14 of org.springframework.boot:spring-boot-gradle-plugin."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-gradle-plugin@2.6.15-tuxcare.14"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.boot/spring-boot-gradle-plugin@2.6.15-tuxcare.14"
    }
  ]
}