{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:68f305d3-bcbb-5e88-b888-b7d90115e4f1",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-orm",
      "purl": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3",
      "version": "6.1.13-tuxcare.3",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:eaf8fe3f-9fd8-5b3c-a157-ca6ebe560eed",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:84f9a47e-78c2-565d-a0fe-ea1f6114a6a3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b5735b97-b94d-5c3b-85cf-a443e1002158",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:454484e4-93dc-5770-99fa-4e68937253e6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3f5d5e7d-861a-5b90-85bc-588c9403f90e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2ec07574-83a7-54a8-ac05-94e429d54317",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c4557d92-6750-54f1-a23d-a8926cf38f3f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:562303b5-95e5-5b9b-b2e4-293884ebc4f4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8308f29d-4c05-52b6-93c9-036f3cda32d2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4eeebd96-308d-5431-a50a-c72e93f8e285",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4cd4b4d5-5745-5a67-90ea-279132c7959a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:11310c48-0124-5ea5-b44d-8704bbae6a18",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:883f0ac9-f59e-5a85-a60b-87a3d1f5dbcf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2852738a-5af5-5493-9f2c-05aa1615a1b3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:91cc6993-d918-53fa-8640-8859aa840198",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:bf8bf211-c041-5d3c-8acc-065f8eb2ebc2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3073ee2a-7f27-5601-8f1c-672cb92d2b7d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3b3b23c5-13c4-549f-91cf-851d03f8a2c1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:044d7d1f-29a6-5824-89e6-a071ea2c036e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c072cba4-e7aa-59ef-9055-15e417774629",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:12cf64b4-8abb-5631-aa4e-fbaf91f63ce7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6c7eec5a-8791-5a04-87d8-ca1e882a56ea",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a4a5192b-4085-599d-8086-ee28170a8c40",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4ecca3b1-18c7-5943-860f-1c58f5c7b1d1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6bf18508-a2af-5399-9d58-2ed314f9773d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ae1ba439-1f82-5746-a780-9c380b97079b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:663aea0c-4faa-5f6b-b475-a72e8c0444b0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d039e655-1214-554a-bcfd-578655ed22ee",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ebfe3b77-ae6b-5f1f-9d2a-0466e75bd6d6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f0dbef93-5ff1-568d-9929-94f5698606d7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:38b55ef9-8b4e-531e-a3f7-805e2527333d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:edb53840-d065-535e-ab40-9f69950d3cca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0bd11258-489e-5cd1-9fe0-f2edaf0be020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ce8b7eb5-5387-5bb4-ad11-93598859929f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:184db841-a108-530c-9bf7-e96b70cafecc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7a44ebab-4652-5bb6-826e-e723fd94bd91",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2bb3e7a7-e962-5190-bdd4-7873f75453c8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d05ad64c-be63-5258-88da-7e3298379dca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0ec8edd5-32db-5bd1-bf69-8e212c3390ea",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:75f24008-670c-5d07-88d7-1ca2949b3d2e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9d0da536-f00e-55fd-9d6c-3db204af5feb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:77e37d05-90f8-5b47-b7ea-b170b6c9e325",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-orm."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.1.13-tuxcare.3"
    }
  ]
}