{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:cd1810b5-1234-59ac-b956-e85eb5d51431",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.7.16-tuxcare.2",
      "type": "library",
      "group": "org.springframework.boot",
      "name": "spring-boot-dependencies",
      "version": "2.7.16-tuxcare.2",
      "purl": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.7.16-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:a162811b-b556-57c9-ba75-a4d40e206775",
      "id": "CVE-2023-34055",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34055 is fixed in version 2.7.16-tuxcare.2 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.7.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4fa7062-87f7-5009-b707-1845901691b5",
      "id": "CVE-2023-38286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-38286 affects version 2.7.16-tuxcare.2 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.7.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e882bc8d-cea8-59cd-8152-a4336683e349",
      "id": "CVE-2024-38807",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38807 affects version 2.7.16-tuxcare.2 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.7.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc04c130-fc6c-5e5d-bd76-8ad6437f1f7e",
      "id": "CVE-2025-22235",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22235 is fixed in version 2.7.16-tuxcare.2 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.7.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a26adee-8453-5fda-b6b9-ed835428cc57",
      "id": "CVE-2026-22733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22733 is fixed in version 2.7.16-tuxcare.2 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.7.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb6602a8-c71e-597f-b2c5-2028b7e37852",
      "id": "CVE-2026-40972",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40972 is fixed in version 2.7.16-tuxcare.2 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.7.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d78efd76-4f61-5d23-8dd1-41cbc18b2fa1",
      "id": "CVE-2026-40973",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40973 affects version 2.7.16-tuxcare.2 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.7.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa78b51c-24da-59ee-ae9a-1a824da44ddb",
      "id": "CVE-2026-40974",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40974 affects version 2.7.16-tuxcare.2 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.7.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c7e405f-6c32-507a-89b8-cb51a0c59e6b",
      "id": "CVE-2026-40975",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40975 affects version 2.7.16-tuxcare.2 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.7.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93469ce9-bdf2-515f-8ca5-5fc47b77735a",
      "id": "CVE-2026-40977",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40977 affects version 2.7.16-tuxcare.2 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.7.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96bac712-7002-5945-a88a-018cb20f51f6",
      "id": "CVE-2026-40992",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40992 affects version 2.7.16-tuxcare.2 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.7.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0cb4a5be-89e5-5b04-ad8a-81b75eb18ac6",
      "id": "CVE-2026-41001",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41001 affects version 2.7.16-tuxcare.2 of org.springframework.boot:spring-boot-dependencies."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.7.16-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.boot/spring-boot-dependencies@2.7.16-tuxcare.2"
    }
  ]
}