{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5ac1df87-e1f4-57d1-a8a8-6a663c6249cb",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-tx",
      "purl": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1",
      "version": "5.3.20-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ea6b9b29-7880-5d66-ac4b-10438d2316ff",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.20-tuxcare.1 of org.springframework:spring-tx and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required",
        "response": [
          "will_not_fix"
        ]
      }
    },
    {
      "id": "CVE-2023-20860",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5dd40ee8-f677-5077-9930-eebcea25df77",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6ad21490-be05-5e89-a478-2746dd5f56f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:af19fb37-05f2-52b8-9d60-83de575a8d23",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20863 affects version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b850681f-8980-5592-9b34-3d134ef32b08",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:98893fb5-31c9-595c-a475-18bf412732ed",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2a120179-1fd5-5b34-91e6-b09152b12764",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8832c311-ac21-5ba2-8e82-de61da0e5fe8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dd66167a-392c-57c9-b1dd-7ccf9de2be0c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f72d1d85-513d-5469-a411-13a0832a30ae",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c6faea76-6c56-5ed1-b7f2-7d03f31815d2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8fca047e-e2bb-5efa-8cdb-60123e09265e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2024-38828",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ce60f9e8-9d78-52c1-8f55-af618ab4436e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:30253199-0926-55b5-aea1-e392c4ce19cc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e44b0eb8-2ca4-5e11-b646-9420e6b70298",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:41354009-0831-5bfd-82d1-a757d6eaefc1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0e3b9a12-72ae-5b3a-b7ba-8017c36b4ecc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7ba2881c-866c-5b2a-977d-7312bbb2f312",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:579e842b-6cfe-5dff-8270-4a0785c138a4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6cce31b1-9f15-54c3-a68a-1d9cd066fe23",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e286c0ce-b7c4-59ea-add5-4f5feb205350",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:54aa61a8-e319-550b-bfe8-a0bba4224939",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:112dee4f-b514-5467-a740-c12d214de1d5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e8f67999-05c4-53aa-8fb1-af2bd6033b08",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7be9d6fa-c97a-544c-b132-eacd00a6e849",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:db0d1d4e-e12b-5ee3-9d59-f5f7dc4b6e77",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2c123590-6050-51d6-8495-6e45e6909425",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7f402d2f-3797-5572-ab80-efb0824894e8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f1b940e2-0d69-5bf9-842d-caf3846df6ea",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5f872715-8a27-5004-9b97-b5ccff727dd6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3c8fccce-79cc-5e20-8c6f-20622d02d238",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41847",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fbb9dd77-8cca-5aae-9eb1-5789be1e6233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41847 affects version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1bd7c6ba-0c01-5659-8ed6-3bc3a74d254d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:68d42a7b-9637-5701-9e43-2ddbf953f327",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4ee5ae95-f404-5de9-ac72-223ec71e44ee",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:226192d9-92ca-50c0-b940-0b5d86cdf9f5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:11307b0a-67e6-591e-91d8-675653d01f6a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:639168cf-98da-5f6b-8c3d-0594d09373e5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d8094b0d-69da-5961-b6ae-b291f3c025b6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:08ed39a6-d3d9-534a-a961-bdac22e773d6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1ef65eb4-4d17-5ba7-8f4c-eccb01a061a5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e88a0708-fe6c-594e-a0ff-b1ffaa246ec8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4d8478ba-2b88-50b1-ae1e-3e14d7e7dab6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8b20c6fe-6082-5734-a26c-1fa8efbe3fda",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c3df4118-58c5-5385-8976-7f5deafca453",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:70f5fafe-6ec9-5fb7-90e7-371663f153fb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f060e8dd-75ed-50a6-abff-57a22844bac3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f86dd663-3b54-5410-9e93-425b1dd724e4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8b918ca3-9786-5c41-8cd1-557c3575f6a9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:669f773a-9113-53c3-b66f-7788e4d75de0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6f5c7049-d245-50b0-b92f-11d2b58215a0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dd5d8660-fd94-5a39-9be0-7cd9a5884338",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4ed61835-27ad-5a4f-b289-789ed0618051",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-tx."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.1"
    }
  ]
}