{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:313a3cf4-0244-53db-aa92-e358ad568210",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-tx",
      "version": "5.3.27-tuxcare.6",
      "purl": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:d4f14f5e-c87f-5333-84e2-76d609e5853b",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b2ca1d8-d6b1-54d2-bea9-408c011e0508",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:527f1580-30cd-526f-933f-5276b02a479d",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b6d688e-c397-54d9-ae42-999fb3711299",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3b9d997-6fcf-5b3d-b7c9-5bfccf1b4146",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27af9ba5-de28-5f95-83b6-9f25a189b45f",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bcfb3452-c8e7-53ba-8ab7-4dfb4fdd68a9",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb22a8a6-4442-5b90-b9f1-1e6ad3565e52",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4184d558-4246-562a-85c3-3e93f21ef9c6",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:adc97302-c9a9-5a70-902b-35ada2d9d484",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d08918c1-0cae-5f8b-8469-cddc45aa13a5",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26b2a2c6-701e-569c-afd8-56771cd8a43a",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-tx 5.3.27-tuxcare.6."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f241a19-e3fd-5da8-9470-e937e8353cbe",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3006e019-d8c7-596a-958b-986b55a0613c",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e5ed8ca-035b-50fc-b969-8fab2412e382",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b5d4e06-f6ee-5cde-843e-f1dcea0f4179",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a701aa9d-b407-5f20-bc7e-ec9e8df906eb",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9c60e39-4522-5ef7-be60-45fb7ed71556",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed1ccb07-7c3d-53d7-b685-5abac171002a",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f997352b-02d4-5718-a307-b096a12088ad",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78c0dc6e-0f96-55ab-847e-157cba154af1",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:876c44d7-7f83-5e7c-a4ca-a7e3e978df20",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5b57510-b7b4-5187-9dae-c02b1930733d",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.27-tuxcare.6 of org.springframework:spring-tx. already_fixed \u2014 The target repository (Spring Framework 5.3.27-tuxcare.5) already contains the fix for CVE-2026-41840. The vulnerability was previously addressed through backport commits for CVE-2026-22740, which applied the identical doOnDiscard cleanup logic to prevent resource exhaustion from multipart request processing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:692c5098-3a16-52ee-8830-0ab0d7c7fddf",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51df458c-7298-5409-934b-c3feac150096",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:783f6fbe-4276-5c27-9ed5-0453580b9096",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1678edd5-3dbb-5137-bd2a-8b82df61600c",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27009f9f-33e2-5dc8-a12b-12a379940c76",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a534971-3324-510c-8944-bf763cc019da",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71f97270-68e7-52db-beb3-d577ed20f4cb",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.27-tuxcare.6 of org.springframework:spring-tx. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:498ff751-c4f9-59ab-9888-ceef48a3cc97",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cccab57c-7f7a-5ba5-985e-c401438bc6c8",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:483f49af-8c27-50a5-8d38-9bd634a55b5f",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d38a1d35-c695-547b-b6df-5efc1ce01721",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2cffe96-b9d4-5539-99c9-459578715aa0",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dbcc4741-9402-5a21-b99b-d7b6348694ba",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ce1b8e2-0f38-5f41-90cc-72ab45dc5cb5",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 5.3.27-tuxcare.6 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.6"
    }
  ]
}