{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2c701e5e-2ad8-57f5-ada4-bfaa70bdf902",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@3.3.13-tuxcare.5",
      "type": "library",
      "group": "org.springframework.boot",
      "name": "spring-boot-starter-data-jpa",
      "version": "3.3.13-tuxcare.5",
      "purl": "pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@3.3.13-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:cc1e1880-91c3-5e8e-9bec-b48449c14b10",
      "id": "CVE-2025-22235",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-22235 does not affect version 3.3.13-tuxcare.5 of org.springframework.boot:spring-boot-starter-data-jpa. This CVE was fixed in version 3.3.11 (https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORKBOOT-9804539, https://github.com/advisories/GHSA-rc42-6c7j-7h5r) so version 3.3.13 is not affected"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@3.3.13-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5027ec78-ac67-5947-9ad0-be8001224b94",
      "id": "CVE-2026-22733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22733 is fixed in version 3.3.13-tuxcare.5 of org.springframework.boot:spring-boot-starter-data-jpa."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@3.3.13-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dda592aa-abc2-552a-9be2-ed07a01acc44",
      "id": "CVE-2026-40972",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40972 is fixed in version 3.3.13-tuxcare.5 of org.springframework.boot:spring-boot-starter-data-jpa."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@3.3.13-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25dd1f5b-ba2c-5e86-9543-3603f466ed83",
      "id": "CVE-2026-40973",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40973 is fixed in version 3.3.13-tuxcare.5 of org.springframework.boot:spring-boot-starter-data-jpa."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@3.3.13-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f94dc4d2-e264-531d-87ee-333ca38e4fc2",
      "id": "CVE-2026-40974",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40974 is fixed in version 3.3.13-tuxcare.5 of org.springframework.boot:spring-boot-starter-data-jpa."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@3.3.13-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e29688b2-6349-5e66-9b7f-160b87df05fc",
      "id": "CVE-2026-40975",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40975 is fixed in version 3.3.13-tuxcare.5 of org.springframework.boot:spring-boot-starter-data-jpa."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@3.3.13-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fe4e40d-d144-5f48-93d0-0337fa30a9d6",
      "id": "CVE-2026-40977",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40977 is fixed in version 3.3.13-tuxcare.5 of org.springframework.boot:spring-boot-starter-data-jpa."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@3.3.13-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:104f8976-a6bf-51e0-8efd-ce7ec3d6d438",
      "id": "CVE-2026-40992",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40992 affects version 3.3.13-tuxcare.5 of org.springframework.boot:spring-boot-starter-data-jpa."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@3.3.13-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09570d63-bc72-5fbd-bfea-1e4b6321aaa5",
      "id": "CVE-2026-41001",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41001 affects version 3.3.13-tuxcare.5 of org.springframework.boot:spring-boot-starter-data-jpa."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@3.3.13-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@3.3.13-tuxcare.5"
    }
  ]
}