{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:0953061b-6170-5d0c-9bb1-69e8b4b73965",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-framework-bom",
      "version": "5.3.30-tuxcare.7",
      "purl": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:1680e53a-ae8f-5746-8661-0d7f9f882436",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3851927-8393-5591-8535-22e49a38f3c6",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:852c8a9a-c18c-57a8-a106-601561d1881d",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa8486ba-9010-5a1c-a8c9-f6fa53f25430",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee67aa65-afda-53da-b3c3-de3c76e70231",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2170e5f0-8185-52e9-b1cd-15c9a4fefd13",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b468bd62-daa4-586d-9b72-bcd351b108f9",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:007ed694-0287-5002-abf2-c7daa8f33a68",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22030740-5735-596a-8da3-566c93f1b7d6",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3fd8a474-ed85-580b-926f-9a68f6be3fac",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06a7a8c4-26b4-5588-a945-2fbcd3a14d7d",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c332ce5-8faf-5a88-9eac-889ca1f5984a",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7a7aaba-915d-5a0f-b5c4-9890d1a9e0a2",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b33f7c77-cfb9-5d96-978a-99832e1a7fb1",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c126e2d7-5dd2-5174-a73c-36fff4ce1f87",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14437438-0570-5631-a989-57c84c9fe431",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0248d5e-4faf-59b1-8520-41e4c4d4ef07",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79ede613-4e25-528d-9d5f-4906e4742059",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ea42590-dd09-5b9b-b50f-0aacca0deddf",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c338906a-4224-5827-920c-908b772b867a",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7debdd25-265c-5d9e-a121-61e245f1694a",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4ebeddc-ae0d-5dd5-b88a-6b449f46dc4e",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom. already_fixed \u2014 The target repository Spring Framework 5.3.30-tuxcare.3 already contains both fixes for CVE-2026-41840. The identical patches were previously backported by TuxCare as part of CVE-2026-22740 (commits 1a619adbfb and ee9443b0bc, merged May 2026). Both doOnDiscard handlers are present in the current code: PartGenerator.java releases data buffers on discard, and MultipartHttpMessageReader.java delet..."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c40ca05-3137-5891-92d4-1765e557f58d",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2c93894-8a24-5cb6-b021-bc17128edb49",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f290cf69-510b-564e-8f07-ba94cc7aaa4e",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:557af7d8-37cd-59c2-8a80-32138491bef3",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:425e507f-5032-5cda-9823-4ff09dbf7925",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc526f45-74cf-5d58-93d2-f13ca929ad8f",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfa402d5-d553-595b-9f07-8eee40097f27",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af18ab69-1456-5c25-8ef7-bb54c9ad007a",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d34bbba-91e4-5bd8-9ce6-6b151026027b",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f41ba8d8-af51-5b6e-8b00-579f8fe30fbf",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4bd7885c-eeee-5236-994a-81813114f0ed",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72b4f16c-10e1-5103-90e5-1f389b93be2b",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d74bbb4-dfc4-5e54-ad18-d62c4badae9a",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74364d6d-ff79-5236-b705-bab4243f38b5",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e5e9a0d-7877-517c-a8f5-a032858a4b95",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83413c7c-b02e-5169-bbd4-86c0ba21c5b0",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec6fccde-ef39-5084-9018-ad82d046a15c",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:680c498e-36ef-5550-bae8-afd22d3f3941",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbdb764b-944f-55b2-9c9c-9a2a82909f04",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69bf4ab7-b78f-5019-8980-5a8450105897",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ecae4b8a-81f9-517a-83d0-6b501665708e",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fef14d4f-d83c-5b28-9d49-67b76b53363f",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87d3bcef-923f-51a7-8a0f-18423a265786",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3a8435e-96ac-55c5-847a-14cd662a0077",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7634e6a-2796-5ff0-aa3e-7bdc7eaa8392",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:169bea7d-643f-5843-9469-f73dc3e4e707",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc23a8bb-86cd-5592-a6ec-203d43aaba56",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7427f69-25e2-5a8f-9fd5-d1c72c0e6ff6",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.30-tuxcare.7 of org.springframework:spring-framework-bom."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.7"
    }
  ]
}