{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:08ee598b-ed47-5689-a48b-cfbae96c55e5",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-web",
      "version": "5.3.25-tuxcare.4",
      "purl": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:8e49af46-44ae-5946-bb64-ecd5051eeaf8",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2414efe9-7d07-5a69-9d1a-7a04323781a6",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d3993c4-832e-5040-9b73-bb752202d2d9",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:928ff92c-4a1f-5b04-926a-65fabaed51d1",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4eea445-d35b-578c-9a1e-363c78da1e25",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e1aa36d-37d6-5aac-a5f5-dd2e1c504bb9",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ff3cf27-d440-5400-8168-a546debf050f",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a90ce44c-8a38-5690-859e-404d8ffbf1b9",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:567ab694-c4c3-5518-bb5e-42363e72fa81",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94d139b4-05d3-5455-a89d-7cb6eb60e3d4",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6bec484-3d30-52cd-a015-7f98d4d84d55",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce8ec55c-4019-5b13-8613-ae5228693e04",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2256f29-997a-53ad-9613-5ee6c81d0d97",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3842c98c-ef40-5b14-aa66-f0d69764dbc4",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59aee10c-165e-541d-a488-8830ea1b1252",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94c317d1-a8d1-5a44-bb5c-d86150c57f90",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75fe3ef5-12bb-5bcf-8c1f-3df64b7fd619",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb2a6af7-d84a-5a09-b6c1-bb3e0382e736",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3571442f-50ea-59f8-bac4-cb07b83257a8",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ade0820c-ba5e-5676-b692-c0352faea7e0",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:401d4fe3-b14e-575a-8db8-32f59980b50f",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65db9dc2-f3cc-5370-9e4c-d5e83f74bce8",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d6e2b58-cb1d-5f6a-8f8e-961a839cc135",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6784c106-9a71-5002-9b65-9896d1f3714d",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c706abe0-0c82-5b6b-adb5-3cd6e38cb2d9",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4274ac09-f8eb-5166-b552-96d3a676f52e",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:247a17ed-1a5e-5d27-adef-64eac6f6435d",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2eaa7953-c8e1-59f0-9609-00eb73a06849",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cf63d72-72ea-56f7-9acd-cb13fd2b38fe",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:baa084d9-0bad-58e3-bf5f-bf3ad774d5d0",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6e1d0f4-394a-5a5f-84c4-5b0e976456ba",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce93db5e-0764-511b-9ec8-d93301d5a4a5",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.25-tuxcare.4 of org.springframework:spring-web. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0308b1b-7528-57dc-8a79-246be6ff1c68",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:527cec08-532d-5a67-8d9f-dd196d94f663",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ac43031-6ff3-57bd-8cd4-4de611105961",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8bfcdd4-a406-5399-8edf-de41c175a35f",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05bde46e-dd23-553c-8917-a26a0b52a8cf",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16036de6-e149-5b21-8d96-fcaf3afe4e06",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19f0d846-a84d-5f19-ae5f-ed9b18617c9b",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 5.3.25-tuxcare.4 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.4"
    }
  ]
}