{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:135682ab-f430-5f21-aedf-4ca31e226c59",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring",
      "purl": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1",
      "version": "5.3.20-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:52c0afce-7abb-571e-9ecb-360612f58181",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.20-tuxcare.1 of org.springframework:spring and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required",
        "response": [
          "will_not_fix"
        ]
      }
    },
    {
      "id": "CVE-2023-20860",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5b56fcda-f1b8-50aa-85bb-c59bc8a17430",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f5f78e71-bc5b-590c-a3f5-48954f138811",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9d40beaf-aa47-5bf4-9615-48bf6c320b93",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20863 affects version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fb3e120b-e2dc-54e5-bf22-e1de6b2cf331",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:25ab0bf6-5230-5b5a-9d59-1dfca22dc6a7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:12be257c-6300-536f-9c79-b7dab7bf9787",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:15fc27e5-fad5-5d5a-8c09-27afb1443866",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:58d01532-94a4-54d1-8cb3-c2054df0428a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:35a51380-943d-51d5-bd6b-3605042864e7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:250918a0-f613-56cc-8ff2-0cdbbe1b0dd1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3e3c5788-72dd-593a-9960-a2d3d27789b3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-38828",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fb24f531-3182-5ad5-94fa-b96d41c0949e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6317ad0d-3929-54b4-b641-da7e626d8857",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:eae6b339-a7fb-5614-8925-e9d2bcf66611",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ae1e3090-80fb-57f7-a6a1-a2be117083a1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f3e89fb2-7e36-5bea-a957-098d40da9e51",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d4b010aa-e60c-5148-a64b-607eec5db1f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d733db63-e3ad-5346-bbcf-335696b3726f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b58bac46-c95b-50c2-8c7f-070c97a9ddf0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:56cf0061-4dcb-581f-99e1-eabe69e05fa5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c3d64218-2a52-5a3f-a50f-74126596af6a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:71c250fa-972e-51c0-bd59-2f980d611f9c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2e83ffa7-e8a7-5ddd-9c30-c847da41f961",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2c24f89c-d3a5-5e32-8d32-fd6308c5f448",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:28acad69-68e5-57fe-8c57-52e4a3dee290",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dc872e7d-82de-5825-9d61-5c01028abaa7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:55651f41-fbce-5360-abde-9b7ed0aa1336",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7ad0a794-f5f3-53e2-9f74-d664ceb23203",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ce004d38-52a1-5b4a-87fe-227aebb5579d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5d46e714-e807-5465-98fa-8b34d4a23634",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41847",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9a4c269a-bcb6-51d9-88a7-1191be2e2bcd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41847 affects version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1e533cdb-ccec-5994-85dd-183845b8d0a5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6fdb1b10-fced-5a41-bacf-90b2a230329e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:55095a58-56ef-561c-8930-023f99429f05",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ccd3102e-7f86-5604-a2a3-da04ff838258",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a0208af1-5df7-5dc3-a443-35e0aae57a1c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:78a4910a-ce02-577e-82ef-dc7f2e441df6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6dbe132e-6513-5a4d-b986-ce7ce84833f8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bc0017b4-9340-546f-be53-d174f1005b7f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e70394bf-88f3-5c14-89e0-da9c74ba39cf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2eae0afd-e41c-5821-b6f5-8047f0fc9fca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1685a683-58dc-5cb5-a7fe-3c2f0a6067af",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4c8b5868-ce6a-5694-a36d-8b9bd6878b50",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:274f75be-e64b-533e-9f48-98332190d03e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d898a5ca-44a8-537d-98c1-c7eebd24ec09",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ccad5417-6a47-5cf8-8a14-389f8fdcfbc3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0aad8158-2326-589d-955c-c9520986037b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a7c17b99-7f38-5e6f-9809-aacfff41b478",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:98e20406-9f12-5b4c-8059-87acc2fb9364",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:02edd9e4-7150-5886-9b66-33c47ab89e4b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:238901ec-0681-5cb9-bd28-9ecfad3f99ab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:567f802c-0220-56f8-9b31-3926bd2aa7ab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.1"
    }
  ]
}