{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:09b752da-d90e-5124-b7cc-ca8808d78dd4",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-beans",
      "version": "5.3.39.tuxcare.1",
      "purl": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:5585fc1e-65df-56b0-af3e-a8f4096afac1",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be220317-17ca-5bad-bc19-fbbb659f21d0",
      "id": "CVE-2022-22968",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2022-22968 does not affect version 5.3.39.tuxcare.1 of org.springframework:spring-beans. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df3027e7-a506-5c3c-8017-262cbe85898c",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7af83941-9b41-5bf5-b269-2fac26923fb4",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38819 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f89316ba-104a-59ae-b9ea-7f949ecbbfb0",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03c48650-149d-58c6-a2ef-aa9560d93820",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38828 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5571a47-6891-56d8-aac9-2c68e12e749b",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:adc9686a-e4df-5861-b5b4-495108df3604",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-beans 5.3.39.tuxcare.1."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05f55a65-8166-5011-b900-fb8a6261f6f4",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79b628cb-70ab-563f-b775-f9d127873287",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa2eee9c-8a5e-532b-b44c-5ef00e712cb4",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b79a94b7-eb20-51aa-a8b3-a347d1635313",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4843add1-bfeb-5997-b3e6-7fa3292f5f8a",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39faf914-2e15-5068-8828-397856c41b3c",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33b47d4b-f9d1-5746-9908-b9dd8ec0d1f8",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22741 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4fe1fbe2-0b1f-5bd3-8fbd-59b12fe4ed45",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22745 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25ec2da7-8e03-5882-a04d-0350d281394e",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b9f7d66-df5d-51a7-9016-d7d4406120f1",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff4429b0-2b7c-5aa6-919a-c3971f16b46c",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95d2fd26-3597-5065-9b4d-957f150b5515",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18408f95-3999-5444-a0ed-975325f1e261",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e698543-83f8-519f-aa97-48c05aa1e1c0",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eee5e564-4eaa-59ea-8ef6-8464f5331a41",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41844 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b846aac-6c25-55ae-ab45-9d28c39f7f7f",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41845 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ac2d0ac-fff3-50cb-8b2d-1989e2e4afb9",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ccdb558-fabf-5e63-990a-2003d34e2697",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41847 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e059e9d-b8a1-55d5-930a-5c835f1a411d",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46f26d54-c3e9-574d-8e49-f00fe0a2cf6a",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:370bcdcd-c19e-570d-a92b-deabb219598e",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69b34715-3e67-54f3-b061-5e305e53ff67",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:faaf6a47-dcde-51d2-9310-14f45d2835b4",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ccc41e37-9315-5202-83f0-9b1db85bee3d",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8d24b22-6739-5330-8ef7-6d2bb21f4c14",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d75482c7-5ada-5a29-bf46-d747145d60c2",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c5bd845-5f37-5670-a845-8a2228f3e12c",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68e12521-141e-5e46-bff3-63b79d6c2a24",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45157719-3194-5d97-8f3d-b8aa8ed9cd4c",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:656adf92-19ce-5163-8277-3f4bc9aa21aa",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54d3a47b-2017-5ae1-8e82-7717d4492d11",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ca9a78a-c44c-5436-addb-8b1121e8ee54",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b48eeb8f-c1ed-5606-a17f-ff52da6ddd6f",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea8bb37f-83c8-5629-a4f8-015dbc068b23",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44b05dca-3d46-548a-8914-8fc2ed480470",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67fab810-1f40-51b3-8447-a8566496bdec",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7373ecd0-c9e8-5423-b3d6-4d0815b07e6e",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:557f6114-9b67-50f5-b317-9a58b7e95350",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d816291-512b-58d4-a1b6-8e17d7216a14",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.39.tuxcare.1 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-beans@5.3.39.tuxcare.1"
    }
  ]
}