{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:90671fbb-6d4c-5cfa-b4b4-8a2d1ae3fd9e",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-jdbc",
      "version": "5.3.25-tuxcare.5",
      "purl": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:0ffcf1bc-3d29-5dfd-bb1d-afa593177d5b",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e7e6f15-0b13-5469-8ed1-29c8775dbcdf",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a17b58a6-43f9-52a0-b7fe-7afe5725a863",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de0d3633-0453-5627-b5c5-cd032a56e6fd",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed055345-db08-524c-95a0-cb73b0189355",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a25aca0f-f829-52ea-9366-3236204a0634",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:006ace02-b648-5e2d-a407-61441adcb5e0",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c2a28b2-377e-5789-9e69-7eaf27c58c6a",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cae3612a-4d83-5fde-bcdb-23e3d78e3302",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa90e248-517d-556c-a14b-5ea9f0a9ce78",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:328377c8-dc95-5b81-a475-f465b90a1f3c",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e4d2e5d-5870-503a-9ced-9a2045442d34",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ceeea9cf-b40b-51f1-af7c-06f7bd3c0296",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d1bd1c7-0095-5996-bc08-bf5ec0aea2ad",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2eb7a4ba-df06-5fcc-838f-1b7cfceb4d74",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f7e5a16-413d-57b8-a359-ff2c294b94f5",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70200b6b-f620-5a46-9e7a-d70f6004b387",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:168a5d89-eedc-55ea-9668-086f6f61f697",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49af197f-7f9d-56f7-901a-92d00204e375",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:985cddb8-309b-5232-8a14-d5c326b1b8c5",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9cf77e09-5f6a-558a-a8cf-6a123918b279",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6d82128-6116-5a02-8541-51057af229f8",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f992832f-6c08-5c2f-afa8-2b1e97734445",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b566cdbc-f22b-52bc-beea-f242ea3ac222",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b91a422e-7749-550a-98df-d1ccf47e2790",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:148a6ad9-6429-5f72-9196-cbf2d3ecd2bb",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2868a7af-0435-5afc-909f-acc1fa26147c",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44665e0e-da18-53ce-8e81-1fa5b1473148",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5d1ae9b-318c-5eb5-ae00-1076344bca60",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12de7235-f946-5c26-b19c-a43577c41205",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b45a072-0030-5614-8f39-5d910a188aca",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e50b2f7e-f569-53d5-9c66-a54fcce43488",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb88385e-a2c7-53b4-b10b-2479bd3b7b1d",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8659665a-7389-5d1a-a53b-cfb02620c7b7",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58bfbe4a-fc83-50e1-9760-3475e7a74a40",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c258ab5-a66c-5c4f-9c8b-5b8d51e78fc0",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c89171e-f8b4-5a40-9058-b8aee2d7675b",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6368cd8-e53f-5eb5-a9af-0c825f3208a2",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fba359f0-0025-5753-91b8-921a4497d1b3",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 5.3.25-tuxcare.5 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.25-tuxcare.5"
    }
  ]
}