{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:8c84cbab-0460-528f-87e5-153a3013a781",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-r2dbc",
      "version": "5.3.29-tuxcare.2",
      "purl": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:199b0da9-0ff7-5170-8ed4-da3f934d0e5d",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da485cc5-4348-5949-b7f5-da2f28439125",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b04e65ca-a89e-5fa6-8caa-0364e8e1e36d",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e86424ad-e9b4-5bb1-a419-b3723f209e70",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1d65d0a-817e-5f98-b8ad-bc73b9c5e737",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38808 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b115424-9889-5920-8ce2-0888f633c9f0",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c37ed528-7887-5896-8765-d1a79921eebc",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92c2bb0b-bd9c-5a98-8bd0-6c193f2297c8",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38819 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:826fdbdd-578b-50fe-9157-710d9cf9af12",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:953e46be-9f7f-5233-89ad-3d22b1b4a774",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c2fa060-ca06-54cb-9d56-db01a42481ce",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e5a906e-8d5d-589a-a036-156dffe47c82",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-r2dbc 5.3.29-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bf32fb6-3a93-5d64-9931-09270a593bd0",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:183e5f29-593c-58d7-9413-bc719de719fd",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d468ff9-e9f3-57f0-aded-2a8c6c0fd0f9",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8044c8d8-e274-5ab9-970f-74271165c72b",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51e74585-0d21-5638-bf2a-f33828bf37bf",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13364fb7-ead0-5dab-80a9-a97436c3c04a",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f5e75e1-7c27-50f9-bfa8-4c1ba7681c47",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22741 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86444dd5-ad1d-5fd6-9a65-8ce34dc32b49",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22745 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bf0e00e-0b80-595b-b1af-dea2efbe78fd",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6b3bb8f-7dfb-5333-a57a-81fc1c6e0f4a",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:827702e0-d4dd-5dc8-81e8-d7f93b969972",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc. already_fixed \u2014 The target repository (Spring Framework 5.3.29-tuxcare.4) already contains the complete fix for CVE-2026-41840. The fix was applied on 2026-05-19 as part of a TuxCare backport for CVE-2026-22740 (commit bc0026ae70c), which addresses the same multipart request DoS vulnerability with identical code changes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9517aa6c-c696-557f-9c80-cf740b821efc",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e58fa501-b381-5a45-ac85-ab55a66ea7a7",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9944bb4a-1d93-5216-a3eb-b00cf97b5b39",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fe5c943-bdd4-5590-9ede-1247dbc08530",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41844 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9073f8c-8fea-59ba-b3ac-bf6816918e24",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41845 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ecfd839a-be98-5eae-92eb-2fc937faf9c2",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7cc22feb-e634-5169-b1aa-dbce163395b0",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41847 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db265a09-323c-5ab3-ab19-136dfdff36ae",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82d7a5f5-74ae-5bc0-9044-1657cf6777ae",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c97abd35-4da9-56ab-b363-1bce88146acf",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5560326-8fea-5997-b735-21b5a5c97e4a",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:627ddc63-8200-5994-817b-be2ceb6dec90",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:972a170e-c907-57b2-9bee-a673f3995771",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2a7eda2-8b6b-5428-b8cb-dbe1594c7a36",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 5.3.29-tuxcare.2 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.2"
    }
  ]
}