{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:dcaaabe3-fe2c-5db7-b056-a3fd0bc415aa",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-instrument",
      "version": "5.3.25-tuxcare.5",
      "purl": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:8d9f5237-539b-585a-a7b5-4afe33f6343a",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10eeae61-ecbf-542a-80c7-2e7734d3cd46",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:943c1225-4b62-5d26-af31-50eede5bbdc4",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02db96fa-9fa9-5969-848c-c7d651132fe4",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:970fab22-5cb9-5a5b-a11f-ce41c005a08c",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fac9b067-d1e2-5d07-bc95-bcee5ef37987",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ce04a4a-f4fc-58ef-8b88-240b22f20e7d",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be08e8ba-52c6-5d9c-9427-b602606de8d7",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53adca62-19ea-505b-a1a3-a80a8aaf25b1",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:457366e3-c5b2-5ab4-8de5-cf4d94d8ff74",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a6a41dc-2a52-5094-897a-d62621ecdae2",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fd799d0-5e42-5b2b-8b4d-43cb8b6f87bd",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61d4f566-b172-5fb0-bafd-e143233f1302",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66470b70-68e9-55b9-aca9-78b469ab95fb",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f654d6d-c0b3-538b-834b-65cd2ff127f5",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7dedf4ca-5637-5ccf-b70c-3e47e8ce63fa",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88e026cb-387d-58e8-957b-ec1ea39a435b",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b18870a6-6bda-5652-9e20-4e31bdbb7485",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8eca150-69d8-57b6-9fd9-4468e29eb861",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13f190b3-2926-50b4-92dc-8ed2e85a0d40",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57d72c3f-1017-5b7c-b3ce-7ed82d365d36",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7d4cffd-650c-5843-a4a8-a22c4c313ff3",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48d68661-e596-58c9-a34e-a65764962603",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dbafa2a4-8bd5-587d-8df2-4048032d5f75",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ca46e91-e669-50a1-b1a1-1c45e613df3a",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b712f10-2795-553e-ae55-d24a49c836fd",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d300d9f-7e36-5374-bf0a-66cd99a5b0fe",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5cfbff21-41d8-5ee1-b696-6fd2d39c504e",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e536e1f-ec6e-5a84-8f0e-92fe19a6e476",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33a19c46-173b-520d-b75e-17450607e8a9",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d637c6ea-584d-5faf-9fb7-816fa0ea03b3",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83fd88fa-918e-5686-b20c-57b4dde5f2bf",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.25-tuxcare.5 of org.springframework:spring-instrument. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41fe5ef2-31be-5c0e-b94d-e4097c643c15",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6996c784-b58d-5878-abc6-8cdbac94bbc9",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a299566e-5302-54b3-bc77-93ac5e5b4fa9",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7848968c-55d7-5b26-8a43-e02b564f8c64",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:184a2910-33b4-5707-9f54-feb6ceb89056",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b31fb7c-5449-5f85-96b5-7b240325bdae",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa6d2dd5-56a3-54f8-b9fb-ad696c8e4f3e",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 5.3.25-tuxcare.5 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.5"
    }
  ]
}