{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a4d9eb75-048c-57ba-9435-4819c1227c8c",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-context-support",
      "purl": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2",
      "version": "5.3.6-tuxcare.2",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:88516c01-13b0-5533-9d4e-a7aeb6aef69c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required",
        "response": [
          "will_not_fix"
        ]
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:da8700ec-e3cf-5f3c-b1ad-48d51ddf5e36",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6c144118-d61d-5374-b907-ed29d81226ca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2021-22118",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:539e7f00-1cef-5adb-b4f1-304055350f32",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22118 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2022-22950",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e50b2164-8530-59df-9180-899c3d04a0a3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22950 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:67d6a10b-b83f-5bbe-810c-481e91e9fbe1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2022-22968",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9cea678b-7553-572d-9b15-007973d2713d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22968 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:72ab24a9-8442-5bd6-bc68-8e63390c9401",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2022-22971",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b964ed45-ec64-51a7-bfb5-6fd3ba5cfe34",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22971 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2023-20860",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:af8fd9a5-fc73-5bbb-bc04-cbccb633844d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20860 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7fbf844b-b20d-5713-8938-dc0fc2a75cc5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20861 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e2c8a049-d1fc-52dd-987f-4c15e37d9422",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:84d70aa9-4c4f-5435-8166-ef492ff07e6d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22243 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:07e68dcc-0685-5b22-ac85-af7a234e17ef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1fbb48d3-1a3d-5dac-9c48-b4242a5d8d2c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ea7ac0c6-1c18-566c-b29a-90f97a0eb62a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38808 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:889ec0fb-be3d-5206-b135-c862b1c744bd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38809 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1b41af23-1c34-5261-a964-f80453bc5103",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e96b497f-81b3-5f5c-938e-4e305d36c383",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e9d3fc25-232e-54da-9c4e-9ed25f20f4e8",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2024-38820 does not affect version 5.3.6-tuxcare.2 of org.springframework:spring-context-support. not_affected \u2014 Spring Framework 5.3.6 is not affected by CVE-2024-38820. The vulnerability concerns locale-dependent toLowerCase() usage in DataBinder's disallowedFields matching, which was introduced by the CVE-2022-22968 fix in version 5.3.7. Version 5.3.6 predates this fix and performs case-sensitive field name matching only, without any toLowerCase() calls in the affected code paths.",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2024-38828",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4bd429db-453e-5ca9-8d72-2c41199dc443",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f7fb01e0-fb3f-5b77-862b-d819ca94172b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0256ae0a-0a9c-5b65-86cd-3405184ac1ae",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e8f334d8-87d5-51a6-ac56-7b3f01ceb2ff",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2de6af3d-bc52-5ea4-b08b-962ee24d602c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5488846e-7e8d-5d9f-869f-2c8fe2239745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a97fdf95-cd1d-57a9-95eb-9f5532a4442e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:144f221a-3ef5-545b-ac32-814228755151",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3380a457-9511-5384-8979-b8e702648273",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:254c5253-7e92-5c2e-a4fe-4460122f2264",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3ae87c2b-ede0-582e-98ec-d18e5bc3e928",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:08b5be59-de9d-5ae4-832c-057fb9b334e8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:21c2733d-395e-5535-9bc6-23223fa1daf9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ce9630ce-72ba-59f3-b52f-d70be451599e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:19c23481-38b8-5cdc-8612-a7f390bb62b2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f9335da7-2771-5f8d-b8d2-56a49c2292bc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c8a39e2b-48bf-53c5-a8b8-ef2c28de7263",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41844 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:69fc5072-a2b2-5956-8d06-b4629197670a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:88481b01-4db1-542c-8a2e-7c50479e90a5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41847",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8b5cf50c-6f44-526c-b408-c4475f10e9f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:31eec7c2-5ab3-55dd-b2fc-831e2a0ebbd4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2c84985b-b3d5-5cee-a2c1-178b0d8ef444",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1ffd4ff8-00e0-5743-9fdd-de83a076d71c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:aec2e59f-8206-5127-8ab6-d165a586f50f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a836cd82-f20f-5f2a-8ae9-22144ef226fb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4ffe8b8a-80e6-5e23-8e9c-bed3df91a23e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0cf458ab-a426-5b8c-8bf2-07a2f7d4b436",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8743b14b-c3da-5307-9d41-8bf2aceb99b9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ed7a21b0-0486-54d8-929c-f499388e45d3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:de22b41b-d318-50b1-9c4e-28ba1b85b6e9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:38ee9534-8d9a-5994-842c-113eee5e2ee6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:438d0777-5dc6-51fc-9609-940bf0fa9fb7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f50fde13-c189-5a37-841b-4925f9a15c58",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f5d1b036-8956-535a-af47-55c804da5ca2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7aece98a-2f58-59e5-a208-ecf2a81e8fa9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:06b92ccd-8f30-58a7-8d4c-9591e0bd9c4c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9f502aa5-caac-55ce-b9ff-b72275860a1e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:99db987f-0eca-5b67-933d-0d1a7757a135",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8eace4f8-1987-5d4d-bc8e-ed81033cd923",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e766a287-2668-5c9d-a06e-5b8db3a0427c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8885c44a-a04f-56dd-bacb-750d56ad3c9a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context-support."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-context-support@5.3.6-tuxcare.2"
    }
  ]
}