{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4fd1375d-7c1a-5a3a-a158-c7fb6ce8d8b0",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-web",
      "version": "6.0.16-tuxcare.4",
      "purl": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:0694867b-bbfb-52b8-a9ad-99be87971a13",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.16-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8c232be-d3e1-54ec-b8bb-9bd922a4a6f8",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.0.16-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ae29d73-86cb-5eea-bd8d-586d4a6e6cd0",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 6.0.16-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e6ab16d-3781-5d39-a63d-2f32326619d9",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.16-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6120c360-a17d-58f0-991e-1b923e03dc0a",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.16-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d66e6a18-394a-5f75-8757-24ceff36c45c",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.16-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a1c78c5-8469-5162-b150-70b3a453f755",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.16-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b06a5ddf-f91b-5620-a092-63f755f6a402",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.16-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75c6f04a-c82b-5480-a2d2-a066d381db51",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.16-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe3a746a-30a0-5190-9543-6dc0afd0f2f7",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.16-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6fcb31d-d29c-5e8e-ac15-c6da4cc851fd",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.16-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ff989fc-6c01-55b6-82a6-33b41ac0370d",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.0.16-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d71046be-63a4-5e22-84af-62a4dc01bbca",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.16-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70326dc6-d445-5d92-86fa-974c6e5b672c",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.16-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a7ae217-df6a-5141-a3ff-329972792245",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.16-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a060b884-44d4-5d8c-8a73-91212f489d3f",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.16-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2b57973-b84a-5b7a-ba33-73351a562932",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.16-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.0.16-tuxcare.4"
    }
  ]
}