{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1cefdaf9-e4e0-5e0b-98d3-f489a1bfbaa0",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-orm",
      "purl": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1",
      "version": "6.2.5-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6cf2031a-e75d-56e2-92df-a5121ed9d717",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cfbbc887-4242-5d94-bfe0-7e07ebb46e54",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:36dfb42d-50b9-5d55-a67e-86a7f7e46dd3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0c428ffb-7501-569f-8aaa-df2f035e4185",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f34d8642-20c7-5bec-92e8-eec71d96d9e1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3ca6dc3a-e1d0-5d6a-b6c8-af63cdb49f5d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:34601620-2620-5409-8ac5-2d91a558b21d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:725b371e-1be6-5265-949e-59062d2cb162",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:16287880-0ac2-5477-aa5b-610619dd73f2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:351cb3e1-edf9-54e0-b675-9abeba933bab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b4234b9b-dec7-599c-88c9-06b432de6404",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:430176da-d55b-5324-8a5c-03af6de2c407",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:68cd88b3-b040-5759-95c7-e09adb1c4019",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a668632f-3bdb-56e5-8d08-fbe8631583a9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:31daf081-8808-5b8b-bdaa-bc59fdf9a7fd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f7d9147e-92b6-5210-9535-5142035b9f52",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a5d2dbff-abcf-5262-b22c-1403e626cb2d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2b085c32-0398-5e81-89d4-d725e571eb3a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8eeea891-e082-5225-9390-5d53754ac561",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0294e146-9fdd-5447-9fe0-0a5919336e5a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:361e74ce-f535-5d26-8027-10fc13853b1e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9a0c9a2f-b05e-5372-829b-01fa3a0089e3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d4e751ab-0a66-5645-b64b-ce17697c984c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:23f64187-e2f3-52bd-9dc2-db359b97f823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ac58f8f5-dd0b-5143-b26f-ad2e9aefd0ab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c9eeae36-11b9-5312-b56a-d36e84d05a5b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2ac7cd17-3dc3-5d46-be3c-920ed8851432",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2a399412-adf9-51ad-8b5a-b8d93576ff0a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ea331197-c2fc-5569-9f2c-0060cbef1241",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7a409782-a5e0-5f4b-8ed2-1f8de9e5fc19",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:71d373ae-2825-5bf7-8f9c-96bf4e3c337a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:47f73be0-a91e-514f-a963-3798fe655226",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4f820ee9-8f2a-55b1-9690-c495b138dced",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:63d501ae-19ce-5952-9961-2918f5b7c5ec",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f8f75590-b50e-50bb-a247-e8b41031696d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:41c34b78-bb22-5a72-a8c6-b28e8bb9fd11",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:43d7d582-a614-5ef2-9d1e-cc2869ca7535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:03b28b7c-52a4-5cfb-90fa-e342324ed4b1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a1495b90-086d-54c3-862f-816f7293b920",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5f49ff36-c72b-544c-999c-fa51c94d44bd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b06bf30d-1af7-523f-b9f0-83537e9e0cd6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dfa98831-cfae-5da3-962d-97ebe7acfd07",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e64acf6c-26f5-5d7f-8b28-3a4bcbd0a42b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-orm."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@6.2.5-tuxcare.1"
    }
  ]
}