{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f683fb51-16b3-51e9-8a0f-155251a00e70",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring",
      "purl": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10",
      "version": "5.3.25-tuxcare.10",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:68c0871d-5c12-5376-b56d-eed3c82ea872",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.25-tuxcare.10 of org.springframework:spring and will not be fixed. CVE-2016-1000027 is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required",
        "response": [
          "will_not_fix"
        ]
      }
    },
    {
      "id": "CVE-2023-20860",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:ef08f590-1385-5b86-bd22-6ad0c2c546b6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:59057779-a547-5505-bc2f-5fcfdc485caa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:d5c29ffa-2f0a-5940-a0fa-9165eb21dfb1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:81efc0eb-e2ec-5612-9ef1-3feadb026cb3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:d5638a1a-ee4e-52b2-abd2-902e7db77014",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:e1151b87-acab-5d36-add2-5d7e062e79b0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:67d299d2-5e31-5a41-b292-b54f1c796951",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:4be4d850-cfd6-5c56-8b24-c8a87be418e4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:e0398eb7-0823-542c-96f8-2cd147b4389a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:d2f0c179-0580-5eab-aaf3-634111f17c5b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:fb2a025c-343b-52b6-884f-aea984721688",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-38828",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:bc6a7b39-3c66-5db0-92b2-2b936897a163",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:0587585f-05ea-5708-813e-6645dceb357f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:3fbc185d-cd3b-59f7-a6cc-990764350a62",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:6834ab6e-94b6-5b26-9b0d-664018478fd3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:7c318b83-b5d1-550e-be20-8d0da711e13f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:954ccb14-2e10-5b90-a838-c2a18bc48267",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:6f17b3b9-9f9a-5532-80ee-b879ebd04215",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:1342e09f-e872-577b-a41c-ae86a57d438d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:1bb6e302-043f-5e3a-b6c5-24303e48fd90",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:705c4f45-ecc8-5c01-8a49-e238402d88bc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:a22e4051-8112-5007-8727-5c0dd6e81833",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:61c3a88c-4a98-5bfb-ab6c-1087c83c955f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:06a38c03-c425-52a2-aff7-ff7539d50797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:25042b46-3251-5a6d-902f-c123f14d5cd4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:c1c870c3-28fd-5878-bace-bdc2b492c55c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:c6077283-4a0a-500a-9706-754ad99ea9f5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:4bcf88aa-6d5a-5e24-acc3-359609482967",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:a80dd4a3-5459-5c14-8a74-b434637f72f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:f3f1cb9c-f5cf-5c8d-816c-73a11d348d07",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41847",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:a78905cd-e60d-55a4-8680-6c372f21d0eb",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.25-tuxcare.10 of org.springframework:spring. All 1 patch commits already exist in target branch",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:34644652-3769-533c-81d4-4837c783bbb9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:ac197c66-e235-54ca-a4e8-fe7415952962",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:16eab6d2-be5a-57fd-9ee6-e3b8988abcc4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:a582ce59-2dba-5305-bd67-2b93bbb6ca69",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:66042371-ce1e-5fb9-a964-5737ff1f1210",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:9b7aa6b6-aeb8-5778-abd0-94bb53eb36ee",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:5927dbfd-4901-5e05-a4b6-2eb7471c65a7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:8727ae97-3324-5c0e-9ede-352f876ca2ba",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:a3d381a4-a08d-50a7-8d3f-ab495a9fdab9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:975a11cd-5a41-5b2b-9cbf-e6a59e806bc7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:6b903ac3-5e49-562c-8ef2-f4bd1ab2d231",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:fd930367-3178-57cd-84a5-b299e9f80456",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:9bb684d7-9626-51da-bb32-4de896a7bdcb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:df743e0a-09cb-592c-8dfb-948ccc9029a4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:52442d93-620f-5af3-8816-9dfbea4096dc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:10b11052-d60c-5142-a32e-e5a8803c498d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:74b1a5a7-d989-5d3c-bc53-0fd86b43c510",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:9267e0ea-e1d3-50e8-b7ad-e78bca921eef",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:e0fb4016-2bb7-537b-b2aa-952e52acccde",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:95aaa4b9-ddfd-5fc1-ad4d-74bf3f98487a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:253a2345-a19b-512f-9735-2bdc344b8ea4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.10"
    }
  ]
}