{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:fdb1fb31-bd80-5c1d-8df9-a43fd53ad5d8",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-context-support",
      "purl": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2",
      "version": "5.3.13-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-context-support",
            "purl": "pkg:maven/org.springframework/spring-context-support@5.3.13",
            "type": "library",
            "group": "org.springframework",
            "version": "5.3.13"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8023978e-f216-56b8-9625-492497f4b492",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-support and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required",
        "response": [
          "will_not_fix"
        ]
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:34f3385b-360b-52ec-ae6c-280bd039f69f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2022-22950",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:93618a28-8d06-5726-99d5-6e858102ba3b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22950 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1bcac238-3564-535a-8e1c-0f310d4882b6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22965 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2022-22968",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:60346a30-fa05-56a0-95b8-98259c6866f9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f947f790-4bbf-5018-a8e1-e6a5dea4d7fb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2022-22971",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:edc46e84-9f24-5578-b6a7-61cdb5a3bbdb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2023-20860",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c73265d4-7ec0-5194-85ea-ff073977e7a0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8cd3a3f8-ead9-5441-95c2-c3b68c34501b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ba23876f-4c3f-50a0-9b1e-9893c267fe80",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a55aa2e3-1eac-583e-8114-2fce54f1f32f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3f9c536a-d801-53e6-a5b1-80e2e790cb6a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fc00317f-74f2-569f-9b1c-316bacf473a0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:100ca2a1-9b6f-5363-83ff-b45c43bdf3f8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:252ff0fd-bf39-5bc1-adbe-3ff7c4a91a2d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e216d209-8520-503e-836d-3d0547ea822c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2aac90f4-a48d-51b8-96c3-44778a4e639b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:87b67d12-b0cd-539a-bbc3-fb28ca77cc69",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2024-38820 does not affect version 5.3.13-tuxcare.2 of org.springframework:spring-context-support. not_affected \u2014 Version 5.3.13 is not affected by CVE-2024-38820. This CVE addresses a locale-dependent toLowerCase() bug in DataBinder's field matching, but version 5.3.13 does not contain the vulnerable code pattern. The CVE-2022-22968 fix (which introduced case-insensitive field matching using toLowerCase()) was never applied to this version, so the locale-dependency issue that CVE-2024-38820 fixes cannot e...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2024-38828",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9c6babf2-5e61-52e2-a24d-82d70158c8d5",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2024-38828 does not affect version 5.3.13-tuxcare.2 of org.springframework:spring-context-support. not_affected \u2014 Spring Framework 5.3.13 is NOT affected by CVE-2024-38828. The vulnerability was introduced by an optimization commit (gh-31834, 0970b1dc7a) on December 13, 2023, which post-dates version 5.3.13 (released November 11, 2021) by over 2 years. Version 5.3.13 properly allocates ContentCachingRequestWrapper's buffer using the contentCacheLimit parameter, never reading request.getContentLength() when...",
        "justification": "code_not_reachable"
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:743b2b3c-9a6f-58b3-b8f7-53403449173e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7aff8f25-c78c-5fd9-ab2c-0d4c61aabf16",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9420971e-1709-5169-9520-c44c565fa394",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3c22cec3-c7f2-5732-a199-2606751ad51c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ef8b963b-d672-5d2b-81be-d5dc0cc6a07c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dbfa53e7-02e6-5a0a-9574-d08845c21a1d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8a457fc5-ca86-5acc-9a71-bdb05bddb93a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2e9d413e-7762-5a2d-aadf-fdbf9976e253",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:71ec1988-baa7-58a5-b8a2-b41b3e103e4f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:404f825d-15ab-5244-95a2-fa0cc91f324c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1404fd68-8a8c-5de9-89fa-b70beaa795aa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:82727979-3f11-559d-8f7f-6c8c7dfcbd13",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d142f8ad-1628-5765-80ff-116c6029ffa0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:10e4eafe-fd67-5b9d-8f07-9adb80f7205d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3caed6d2-bfd0-5306-98fb-1e0008b76b84",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:37311434-7ac5-551d-b0e4-9ba99caeeee1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41844 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e476f3d9-3c51-513a-8508-1f05e7d1b4f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ebcdc4aa-ee05-56dd-aa20-6159546d23e8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41847",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4c759d7c-f917-512f-8666-5f0b5fb899c9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41847 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:75fd5b53-1c87-5e9f-937d-b181b04512b6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bc95ca4e-2a81-5b77-9bf8-77fbfd3f9db3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3fb21376-5336-5f3d-97ff-35764c8c8cc7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1f97150b-393f-5bf2-a980-ed0bd53bdb3b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b5a7840d-9e9f-5e99-92c6-d65c2f659bb2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c779273e-99f3-5f47-8e83-608b6197e339",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:15841283-db4a-5374-b3c3-b71f9df0bdbd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d668df12-45c7-59e1-bf48-b75c1de7deca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6973c5e6-d68a-5ab9-9800-b6e79e7d6ef6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3249053c-5443-51ff-a54d-8c2a879cedc6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7cb70ef6-72bd-5397-b8de-ef8df651bbed",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:202d1581-0bbd-5e16-b2df-acaf46b0dc27",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4d819dac-c20a-5eab-9a3b-8aa82d7d60ca",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-47890 does not affect version 5.3.13-tuxcare.2 of org.springframework:spring-context-support. Target version 5.3.13 is not affected by CVE-2026-47890. The vulnerability requires SSE (Server-Sent Events) Fragment streaming functionality, which was introduced in Spring Framework 6.2.0 (August 2024). Version 5.3.13 predates this feature entirely - the vulnerable code path does not exist. The CVE affects versions 6.2.0-6.2.19 and 7.0.0-7.0.8, all of which postdate the target version.",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c6c88b30-6eb0-585f-804b-7abbe8e48501",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0cd9c54f-62b2-52b8-b9bc-5578f36eadec",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b916413e-fca0-57f5-b1cd-f3eaeffa7afe",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9b98812d-c0c7-5f38-86c5-5efb797bf28b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3f0c344b-09b6-51ff-9914-768f9f4caf19",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1ca5c608-7001-5f90-8b24-e2d70957fae6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1e7bc4e1-a11b-5bc2-b8eb-53d868a2901e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5ffacf47-199e-52bd-a410-58a2037491ad",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:31887214-f77b-5028-b709-6a0433d815e3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-support."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-context-support@5.3.13-tuxcare.2"
    }
  ]
}