{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f3a6e501-e444-5d14-993c-8ed86396b18a",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-web",
      "version": "5.3.25-tuxcare.5",
      "purl": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:4a024525-a3f2-5991-84d7-c77462fe5fb4",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81cb6251-186d-53b8-b395-1256f07c4187",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be83b421-c1f2-5820-9c6f-7e0cb3bde62a",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ace8791-31cc-55a9-8822-cff0311d6a37",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68f5fa6f-3386-5180-9fe8-55a366099f8c",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f284af4-ac71-5b70-af2a-721ab6508f78",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98c41c05-1436-5ffa-8945-a3a7b447d9b5",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbf50503-078d-53cc-a3db-ed99dc8cfcb2",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32b6a642-6c7e-554f-b4dc-b58da94ccb19",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c13687e-628c-5ab7-9a7f-547f267e5647",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aeda3df5-91c6-52a4-9ea2-3a79ac1bb82e",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5069cf4-a0b2-563a-be86-4a4a622225e3",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11bf864c-c3f3-53ac-900d-96695cfbbdc8",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb11efdd-2dbb-5356-afe8-cbc6466ecf98",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:789cff03-0049-5cdc-9261-7fc0d4e9fc12",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e18405b9-6fe3-5709-93f9-fa7f0550d978",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b43067c-d042-534b-a8c6-acb5ea994bae",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0ecdcea-eae4-5261-a818-fee7311e3662",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28f59b0f-b026-5b41-90b0-81476d34bdef",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37df7e02-8679-5226-8ffc-efa1a80ad95c",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5bc052d5-5cf2-5e6b-80d7-fafe61262301",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c965c160-89cd-5eb4-bf7b-9d9d93538bad",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98699695-797d-5ed7-ac8a-6d3909855b1e",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ba66446-c2b3-5c04-96c6-654bd4c9e794",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9af41186-b44b-546e-a4ba-ff4a4765ace7",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a608bb36-150e-57c9-80bd-de39cb771e9a",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:905840b9-1e04-517b-ba21-9c1d4517e93b",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:374d3fc3-0018-54ac-8b28-e8f29a8dec34",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a577caa-ac36-5ca4-b8b5-170bf54b5a12",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80dfd224-14a6-5700-8892-4761bfc93a87",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:680a74a4-31c8-58a7-b4ad-f9beec2ace16",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35f5b197-a663-5154-9025-4efc977fafdd",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.25-tuxcare.5 of org.springframework:spring-web. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d840eb8c-a571-5dd1-84ee-362e404361bb",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b0b867d-d511-5bc3-a49a-37c23fceba08",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:022ff867-4414-5b28-844d-b64c0b28359c",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44b9088b-400a-54ec-ac57-6a5bbb78f46f",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab8b517c-7572-54aa-9441-d941e423ecf2",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0cc604c2-0581-5b1d-b38b-3130210e3811",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:854780cc-0aae-5119-938d-0f9998b28af4",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 5.3.25-tuxcare.5 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.5"
    }
  ]
}