{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:fc1fd1ae-4913-5b1b-b1a9-fc80bbfb9818",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework.boot/spring-boot-starter-reactor-netty@2.7.16-tuxcare.6",
      "type": "library",
      "group": "org.springframework.boot",
      "name": "spring-boot-starter-reactor-netty",
      "version": "2.7.16-tuxcare.6",
      "purl": "pkg:maven/org.springframework.boot/spring-boot-starter-reactor-netty@2.7.16-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:324e9ed4-353f-5c6d-84cc-070c00166df1",
      "id": "CVE-2023-34055",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34055 is fixed in version 2.7.16-tuxcare.6 of org.springframework.boot:spring-boot-starter-reactor-netty."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-reactor-netty@2.7.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e4882ec-e3b1-539b-8805-b4345286d248",
      "id": "CVE-2023-38286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-38286 is fixed in version 2.7.16-tuxcare.6 of org.springframework.boot:spring-boot-starter-reactor-netty."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-reactor-netty@2.7.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da3c6f52-55ca-5457-a030-a9f0a4cdf1b6",
      "id": "CVE-2024-38807",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38807 is fixed in version 2.7.16-tuxcare.6 of org.springframework.boot:spring-boot-starter-reactor-netty."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-reactor-netty@2.7.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbb4d225-b255-5eaf-9c57-6554475163b0",
      "id": "CVE-2025-22235",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22235 is fixed in version 2.7.16-tuxcare.6 of org.springframework.boot:spring-boot-starter-reactor-netty."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-reactor-netty@2.7.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95e7ded9-2d96-588b-a674-0d4caf21b8eb",
      "id": "CVE-2026-22733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22733 is fixed in version 2.7.16-tuxcare.6 of org.springframework.boot:spring-boot-starter-reactor-netty."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-reactor-netty@2.7.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79d8bb74-86e5-5f58-89f3-499c50148c7b",
      "id": "CVE-2026-40972",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40972 is fixed in version 2.7.16-tuxcare.6 of org.springframework.boot:spring-boot-starter-reactor-netty."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-reactor-netty@2.7.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c80035db-ad04-56e8-9fa6-a8e8bdc63383",
      "id": "CVE-2026-40973",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40973 is fixed in version 2.7.16-tuxcare.6 of org.springframework.boot:spring-boot-starter-reactor-netty."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-reactor-netty@2.7.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28e8490a-3079-5a7d-99c2-436a33b13b65",
      "id": "CVE-2026-40974",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40974 affects version 2.7.16-tuxcare.6 of org.springframework.boot:spring-boot-starter-reactor-netty."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-reactor-netty@2.7.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed44adb5-576e-51b7-97a9-a932910752c3",
      "id": "CVE-2026-40975",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40975 is fixed in version 2.7.16-tuxcare.6 of org.springframework.boot:spring-boot-starter-reactor-netty."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-reactor-netty@2.7.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7594ec3e-83d4-5447-9164-3a97793f74fb",
      "id": "CVE-2026-40977",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40977 is fixed in version 2.7.16-tuxcare.6 of org.springframework.boot:spring-boot-starter-reactor-netty."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-reactor-netty@2.7.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a4dcb5d-4bef-5fa5-b1cf-d83e904dc9f6",
      "id": "CVE-2026-40992",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40992 is fixed in version 2.7.16-tuxcare.6 of org.springframework.boot:spring-boot-starter-reactor-netty."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-reactor-netty@2.7.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:070267ff-c478-5024-9d0e-8dd42aefa049",
      "id": "CVE-2026-41001",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41001 affects version 2.7.16-tuxcare.6 of org.springframework.boot:spring-boot-starter-reactor-netty."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-reactor-netty@2.7.16-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-reactor-netty@2.7.16-tuxcare.6"
    }
  ]
}