{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:96e413d1-c069-53da-942e-3a5e375ae9a5",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-context",
      "purl": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1",
      "version": "4.3.27.RELEASE-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:eaf3a4bc-d37a-504f-a773-d6e7d8e03a22",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2020-5421",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9dad522e-ae04-5da3-947d-251a00af627f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-5421 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6e560de4-8b9f-5f5d-80da-d244e8d658c2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2021-22118",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2f92ecf7-6b35-56b7-8f7f-8da770101b86",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2021-22118 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context. Spring Framework 4.3.27.RELEASE is not affected by CVE-2021-22118. The vulnerability exists in WebFlux's reactive multipart handlers (SynchronossPartHttpMessageReader, DefaultPartHttpMessageReader) that use fixed predictable temp directories. Version 4.3.27 predates WebFlux (introduced in Spring 5.0) and uses servlet-based multipart handling via Apache Commons FileUpload with servlet-container-managed directories and random temp file names, eliminating the attack vector.",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2022-22950",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3c1694f4-3f43-5426-8d1d-093ec11387f3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22950 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:84f5a593-a2c7-5138-9a8d-6653bb86857d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22965 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2022-22968",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d4b50b7d-99a0-5151-aec9-911b3776e0e2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22968 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:64c46729-d193-51d6-898b-d36997b3d8af",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2022-22971",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:163c296f-79a5-5722-8c01-ad50dc6b5ac4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22971 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3ec70b18-88c5-5185-9c04-984d7a5beb6c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:65f6c153-6ddf-554a-b8a5-dae6ec14bace",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20863 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c18089a3-995c-5be6-be0a-58f3c8fbbd12",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22243 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:430b8fae-214c-57ef-89b2-319b301ff88b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4a8b86b6-c966-5aa6-b046-0d0b6793043d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c22d2802-12ac-5796-8a0e-3443cc89afd2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1b3f44ed-c73c-55fa-9fb9-6af149f486a9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2cbd9030-e14c-563b-8f52-60dac8603076",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5b387f5c-2c3a-55d1-a127-8d1e7cdc9828",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2024-38820 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context. not_affected \u2014 CVE-2024-38820 describes a locale-dependent toLowerCase() vulnerability in DataBinder's disallowedFields pattern matching, introduced by the fix for CVE-2022-22968. Spring Framework 4.3.27.RELEASE is NOT affected because CVE-2022-22968 was never applied to this version. The DataBinder code uses case-SENSITIVE matching without any toLowerCase() calls, so the vulnerable pattern described in the C...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:645e9eb4-3af4-5a48-a89b-0de298ae0aef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3162cc1a-bde2-5032-87f5-9e15de8911ad",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0c814085-8dcc-5627-899c-78f536d11a8c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fef3ea62-5fd8-5595-b545-c97d3e0e9430",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:faf45ad6-6acb-5c75-a6f5-ef391c0a8279",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3f582d64-7543-5cc4-804b-c46bb41004a1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:29c7ae89-7f60-507a-ba83-2c104a270259",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-22740 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context. not_affected \u2014 Spring Framework 4.3.27.RELEASE is not affected by CVE-2026-22740. The vulnerability is specific to WebFlux reactive multipart handling components (PartGenerator, MultipartHttpMessageReader) that were introduced in Spring Framework 5.0. Version 4.3.27.RELEASE predates WebFlux entirely and uses traditional servlet-based multipart handling with a different cleanup mechanism (finally block in Disp...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:43c4f114-e627-5063-9bfd-21e3aad4370e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:670927e1-fc8b-5861-8cf9-9cdc83ab8b30",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bf90c9d6-09d2-583d-9178-79b973275641",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:900145fe-a9d4-5176-ac35-ed002869be33",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aaf20742-f921-585e-91f6-711a616e4092",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:37eed8dd-d682-5b05-a423-94f83869fc8a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b406546a-a9d5-53eb-80bd-b6e40ba46024",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1ab4a978-0086-54fd-be7a-1de645b22e9f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:592b68d0-3a1e-53d6-932d-da132c8335f0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:417adc83-8dd0-512e-982c-af209156b7c0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c104c87b-023d-5dce-baa2-91a2e43f6813",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:95294691-6b9d-5c10-a25e-bd957d99e027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bfc03bf7-ca4e-5391-958f-7f5f1c8d5192",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8f442044-231f-5bd0-b604-e7a15617310f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:85eb3dbb-fd06-590a-ba80-bf01d1e244f0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e08ca523-19c4-5fef-af73-e36ae7af2e2a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b824d7b1-614f-5691-a59c-28e18f26c65b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:eb69a3d9-4d1a-50f8-840c-865450f56f7d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:51f5b5e7-9a63-5b45-b47d-b0d16e23806a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:833961a2-573c-5ac7-9a26-b170ab943b71",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e8622aeb-1f59-5972-9026-2342bee03fad",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:78754003-2a2b-5694-966a-1d7cd150c6db",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f1cef798-7ec2-52f2-afd7-3e0f383b8960",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ca534b31-8a13-5cf7-99fe-4861e0f86b18",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7d02c7c1-d1e9-5874-91be-bc8db2b47fc9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-context@4.3.27.RELEASE-tuxcare.1"
    }
  ]
}