{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:294b29b2-b522-50e1-89eb-ffb722fb840b",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework.boot/spring-boot-starter-web-services@2.7.16-tuxcare.5",
      "type": "library",
      "group": "org.springframework.boot",
      "name": "spring-boot-starter-web-services",
      "version": "2.7.16-tuxcare.5",
      "purl": "pkg:maven/org.springframework.boot/spring-boot-starter-web-services@2.7.16-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:dd2705b2-2ffb-5e89-9c80-19ce608914d4",
      "id": "CVE-2023-34055",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-34055 is fixed in version 2.7.16-tuxcare.5 of org.springframework.boot:spring-boot-starter-web-services."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-web-services@2.7.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1e9eb76-d0fd-58d3-a47d-b3b6faab83cf",
      "id": "CVE-2023-38286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-38286 affects version 2.7.16-tuxcare.5 of org.springframework.boot:spring-boot-starter-web-services."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-web-services@2.7.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96687d60-5dfa-56ee-934f-35a5e4e86092",
      "id": "CVE-2024-38807",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38807 is fixed in version 2.7.16-tuxcare.5 of org.springframework.boot:spring-boot-starter-web-services."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-web-services@2.7.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:196fa720-473b-5c1f-b8bf-8fe0e398f2ab",
      "id": "CVE-2025-22235",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22235 is fixed in version 2.7.16-tuxcare.5 of org.springframework.boot:spring-boot-starter-web-services."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-web-services@2.7.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4569a96f-116d-5744-a695-309332eba45e",
      "id": "CVE-2026-22733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22733 is fixed in version 2.7.16-tuxcare.5 of org.springframework.boot:spring-boot-starter-web-services."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-web-services@2.7.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86f5b4fe-b1d3-53eb-96a0-453e7985cd3c",
      "id": "CVE-2026-40972",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40972 is fixed in version 2.7.16-tuxcare.5 of org.springframework.boot:spring-boot-starter-web-services."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-web-services@2.7.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3c4f1a8-c663-5741-bc9c-4edba2458400",
      "id": "CVE-2026-40973",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40973 is fixed in version 2.7.16-tuxcare.5 of org.springframework.boot:spring-boot-starter-web-services."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-web-services@2.7.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e308c4f-ed57-5af8-a785-6283c83fc56f",
      "id": "CVE-2026-40974",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40974 affects version 2.7.16-tuxcare.5 of org.springframework.boot:spring-boot-starter-web-services."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-web-services@2.7.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5546bd05-0b3d-5cb3-9ccc-62fe34a4e14a",
      "id": "CVE-2026-40975",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40975 is fixed in version 2.7.16-tuxcare.5 of org.springframework.boot:spring-boot-starter-web-services."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-web-services@2.7.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e7073fe-7d23-57df-8c94-d5d2897d3c00",
      "id": "CVE-2026-40977",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40977 is fixed in version 2.7.16-tuxcare.5 of org.springframework.boot:spring-boot-starter-web-services."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-web-services@2.7.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4685fcd6-7dc4-575d-a591-df3f38a84d38",
      "id": "CVE-2026-40992",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40992 affects version 2.7.16-tuxcare.5 of org.springframework.boot:spring-boot-starter-web-services."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-web-services@2.7.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4fcf050-fb09-5a8d-bff3-dfb631e4faa2",
      "id": "CVE-2026-41001",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41001 affects version 2.7.16-tuxcare.5 of org.springframework.boot:spring-boot-starter-web-services."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-web-services@2.7.16-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.boot/spring-boot-starter-web-services@2.7.16-tuxcare.5"
    }
  ]
}