{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9c15b166-108d-513d-bbc6-c7b099790388",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-websocket",
      "version": "5.3.25-tuxcare.4",
      "purl": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:e3ab7aa1-3a97-5df0-8202-406313c925ff",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e2341df-0afc-540d-9434-2b906713f1ad",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c727a649-5caf-554e-9c39-936c92bfcf07",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e49ab48-ec1f-5aed-b89d-c825a442824b",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:458cd563-5fee-5435-b754-56e388defd2b",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf7ac6bc-bc99-5ed6-8457-84ad57ab920b",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:809f4e24-74d3-5395-a7b7-068fa79e3205",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e20f89b7-b663-5258-a6bd-6447edd07b45",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b32907a-4655-563f-936c-111c33d603c9",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d8d1a7c-2fcd-5d89-9c60-a1101aa87997",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e995fc06-dba6-5c1f-a333-33759972dc43",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e623025d-8f47-5eb4-bbb6-b3b978313492",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5af7bca2-d86e-52ce-b1ca-4cf790d2adcf",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b33a58ed-90e6-5de4-92fe-407e20d0b64e",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d63d66ed-5d95-5a7d-a956-560ad0cf1965",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17215583-1a80-55c4-bf90-87451e1a3b9f",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4350d55-d6ed-5441-829e-f6213b73ab3d",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e64eff7-8cec-57ae-9bc7-658ceb066747",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd03ffe9-d2e3-519a-b4e4-20fc68553fc5",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:515bc7b0-1b71-5014-b511-fdd2acfa26a4",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cadf616-4d86-5269-9712-ff928516de16",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:196019fd-2b6a-54c8-8d87-ca5a4a5d59bf",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f670f42c-521c-542b-bb2d-f4fd40dc6068",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c7ba6b7-9c7a-5517-841e-8581f6df25b5",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f594d7f-4747-5e33-8a75-c99f5c7663ce",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7921ee41-5d2d-5c5a-8302-f976eb17c363",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24e22791-19f3-573a-bb89-9c2e67cc464c",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4be258ac-5f90-582e-aa5d-8c2aaa593ec2",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8dc68c2-74e4-55ef-a3fe-944a160ca22e",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40801e93-b0e6-5ce4-8de0-10e5514cb685",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:576be4d6-9535-5fea-97ba-30ce2d81c1a1",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50d62e7e-15cb-5b70-91c3-50f4646b5c13",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.25-tuxcare.4 of org.springframework:spring-websocket. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ecbe67d-189d-5d43-9ade-34bc37426f42",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de6391b7-ac47-5806-ac39-0f301a003a69",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb519a97-4dac-573f-8885-e815e19fefd7",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f0e1e00-63e3-54f6-8954-c4821bfd9e73",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd312054-aad1-5420-bab3-3add6d8351e5",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef6d56de-72f3-5850-8dac-8435e053de2b",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b33a7f14-27b2-5324-b992-8eeb5da4afaf",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 5.3.25-tuxcare.4 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-websocket@5.3.25-tuxcare.4"
    }
  ]
}