{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c66223dc-e0eb-5c76-a846-f233a8cb9b92",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework.boot/spring-boot-starter-mustache@2.7.16-tuxcare.6",
      "type": "library",
      "group": "org.springframework.boot",
      "name": "spring-boot-starter-mustache",
      "version": "2.7.16-tuxcare.6",
      "purl": "pkg:maven/org.springframework.boot/spring-boot-starter-mustache@2.7.16-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:0eb35e05-cdfb-5c05-8041-1357d1ed6006",
      "id": "CVE-2023-34055",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34055 is fixed in version 2.7.16-tuxcare.6 of org.springframework.boot:spring-boot-starter-mustache."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-mustache@2.7.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02d2424a-8f91-51e9-9cbc-55dbaf8fd0da",
      "id": "CVE-2023-38286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-38286 is fixed in version 2.7.16-tuxcare.6 of org.springframework.boot:spring-boot-starter-mustache."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-mustache@2.7.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7263b9fd-14b4-5ab8-adf4-5184578cfd70",
      "id": "CVE-2024-38807",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38807 is fixed in version 2.7.16-tuxcare.6 of org.springframework.boot:spring-boot-starter-mustache."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-mustache@2.7.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4c2493a-bf4a-5f47-beb5-63cec6732f05",
      "id": "CVE-2025-22235",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22235 is fixed in version 2.7.16-tuxcare.6 of org.springframework.boot:spring-boot-starter-mustache."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-mustache@2.7.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30956ba1-2e9c-5976-86e4-92725f413e44",
      "id": "CVE-2026-22733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22733 is fixed in version 2.7.16-tuxcare.6 of org.springframework.boot:spring-boot-starter-mustache."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-mustache@2.7.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69cfa1e6-b8ee-55dd-81b8-69c46a0baca2",
      "id": "CVE-2026-40972",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40972 is fixed in version 2.7.16-tuxcare.6 of org.springframework.boot:spring-boot-starter-mustache."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-mustache@2.7.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67264b7f-ae4c-5921-b5c0-9671ceef6d12",
      "id": "CVE-2026-40973",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40973 is fixed in version 2.7.16-tuxcare.6 of org.springframework.boot:spring-boot-starter-mustache."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-mustache@2.7.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17f988d4-b0ed-57bf-8d35-ebab5a07eea5",
      "id": "CVE-2026-40974",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40974 affects version 2.7.16-tuxcare.6 of org.springframework.boot:spring-boot-starter-mustache."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-mustache@2.7.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57a9e32a-7e0d-5f74-8166-97351af8e4d9",
      "id": "CVE-2026-40975",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40975 is fixed in version 2.7.16-tuxcare.6 of org.springframework.boot:spring-boot-starter-mustache."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-mustache@2.7.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35056b50-9979-51c7-aa40-49182e22a713",
      "id": "CVE-2026-40977",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40977 is fixed in version 2.7.16-tuxcare.6 of org.springframework.boot:spring-boot-starter-mustache."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-mustache@2.7.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d708d17-6e5d-55d6-8cc1-bdb6c9fc1b04",
      "id": "CVE-2026-40992",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40992 is fixed in version 2.7.16-tuxcare.6 of org.springframework.boot:spring-boot-starter-mustache."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-mustache@2.7.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8397c96-04ef-5874-84ac-585c2f29a973",
      "id": "CVE-2026-41001",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41001 affects version 2.7.16-tuxcare.6 of org.springframework.boot:spring-boot-starter-mustache."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-mustache@2.7.16-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-mustache@2.7.16-tuxcare.6"
    }
  ]
}