{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:223a3300-f5dc-51cd-84ba-4da986af7797",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-r2dbc",
      "version": "5.3.25-tuxcare.4",
      "purl": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:8c6eeb79-da44-5141-a624-7fa869724d2b",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c1e00b9-993e-5a1c-9113-51a18fc9ecfb",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf51add3-0418-5e35-ae5c-41ae28881643",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ec427d8-a558-5394-9511-aa3640735ed9",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64460f7e-2ccd-50a5-abef-da0b6a897ee6",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:599fac5c-e4ae-51e5-a80f-63d7a3a1c263",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:914c403c-f724-5e13-ba48-d6649676d6cb",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:757f7c62-46c5-5130-bc70-38cb9e3fd064",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ff48dd3-3dd6-59ca-b50c-d6aeacda7b40",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2485991-a5b6-502e-a89b-115b5567368b",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8f8f170-0cec-59ee-976d-177b6292370f",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57c71422-56ad-5e83-9d71-d7b6cab0d64b",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed4fc94b-0539-5f59-b1b0-23a8ef49f515",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d93a1b5-dd22-56a2-8b68-dab234c29c4a",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cca6624e-61f8-5959-8864-9ce925762a8a",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:649d8864-6a79-5de1-b443-5552f290a899",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7f2a628-27e2-54d9-997f-97c5db28ddd6",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3df58daa-73f3-5f9e-81e3-34650acdbeeb",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efb16639-9bd2-57ae-a753-6a12f0c46378",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eddf6272-e63a-5b6d-9232-2645c9a2b8f2",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0ab44e5-e2c1-5e35-8f36-2c52042308d9",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00ee1fe7-97cb-5f8d-a660-6e1807116b21",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b343d3f-ad4f-5dab-99b1-ff577a56fb36",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0249a070-3542-5233-ab99-60bf0b936445",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84e4fdb9-2ed8-5ff8-8895-e7412f096886",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1fb34d1-28c5-5ad7-b702-72c59c317bc9",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72121776-1728-5e93-807e-eb628ac0b1a0",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89f7f7cb-d728-5916-93d3-c5bd67a4a8c2",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab55fded-b15b-58ae-a723-9b44ca8f9242",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0871e51b-de01-5be4-8f0a-7395f4ef5492",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9319caf-d480-5344-872e-e4ffdb22b5a6",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47e862eb-216b-5b36-9641-194c8faba80d",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9aefc8b-c0b8-59c5-86d1-0734c736fd32",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4373afa2-3816-5259-8619-a7445c738212",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:777ac82a-3f49-55d3-bfce-9389845ec85f",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b716d986-87dc-5d34-9306-8c3259c7ef24",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:816bcc83-d484-5bbe-911e-791d3b2debe8",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:408d29ac-d4e7-5943-b072-696dbc482cfe",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2fe9c1c-0189-5d14-994a-123345bccf28",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 5.3.25-tuxcare.4 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.25-tuxcare.4"
    }
  ]
}