{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:41186054-9d29-5612-8e07-16c286205235",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-instrument",
      "version": "5.3.25-tuxcare.7",
      "purl": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:8757cac7-5d2a-5518-8117-dff41abf6c45",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:040f28c9-4247-5f05-8457-a94879c4d9d7",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d69842e-aa9a-59b2-8b20-cdd48dafca74",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9afc9392-8c92-50a3-a040-45916b08046c",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d5740ec-04f3-5f5c-b4aa-2e0b41a4d3d4",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75fdd2f3-5a18-51c6-9d5f-3966ae1bd9fb",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f9edd72-5f8c-5ef0-82de-7e9de6d8e0b9",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:065b6a1e-6ebe-58ea-ad96-42bc35c8f877",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2c9e6b5-18a5-5cf2-996a-86dde6d16663",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa078a28-0fed-52d0-bbca-9ad1cd1eeb95",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78a35039-92a7-5631-b365-fcd3b3f50842",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab191869-f76c-57e0-8424-19e8fa5dd29c",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8594981c-5b2d-5e91-a847-598ace4c9fb8",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:225150c6-83a1-5b99-9f18-7875a660b59b",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:beee8906-0e99-50ef-8736-b9720b7c0038",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:079023ca-508a-5dd5-9e54-4255cd5eb131",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49aa8b79-be7d-5b60-ade1-6d7149072998",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:850b5832-50a4-50ea-9159-df1291b51e16",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10881799-fd11-5e3d-9437-5eaa91735f05",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:531b0a07-2931-533b-a09a-099ac8c44e41",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea1d7b8a-f5f4-50bd-8ccf-34f501006584",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26667fa3-23da-568c-8f90-26f6cd141dcf",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36843f2b-ffc4-5aeb-b4ff-89af7d0c7de5",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:674fca94-77c8-5449-8f68-9dcb3cf2714c",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f6f2003-286a-5008-9345-bcf599eb5f8c",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff49a65e-ca7d-5039-b3a6-8b0db19b15bb",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc7f5b5e-7f70-510b-a0d6-d5a9706e6507",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bceb1b8c-16b6-5ce9-8651-a81e8ac79b63",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b8ce039-b81a-51bc-9681-315ed47023b9",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c0e66fb-4ffd-5493-a299-a509b7dac07b",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ab1568d-e9d1-54d9-b2da-5224dfbad1e2",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de0afb4e-b56d-5fa7-8410-f10b43bd7fb1",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.25-tuxcare.7 of org.springframework:spring-instrument. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b858a67-9562-5b19-bdc8-cb8d025fa43c",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:666b8cd7-aed4-5717-879a-922ec2ac9958",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37c468e2-b3a2-555f-8481-3f846c8a537e",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33442768-810e-5ba9-aa8b-0fb0ec5add9b",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac41ea35-0a29-5de1-a787-dc4ceefa25de",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdceb164-bab3-5e38-a1e4-382e71cf911d",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4de292c7-fd4a-548c-9d94-53cec2c1e920",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6bdb75a-253b-548a-b839-5688a6848ea4",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2171857a-9862-527d-908e-105bbbf20bee",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2606dce-b909-5f28-9dd8-db6b87d45e9b",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab8b8722-4f92-57c1-a26a-91bee173cbd4",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33e5bd93-2560-53a1-8bd0-f6b7069503b8",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82a93184-c4cb-5920-bfba-1345561e4820",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbf0baaf-d575-5cee-aa09-95459becd5d8",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5d5874b-f6cb-5e4a-a390-63e69d8d9b66",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49db8bb6-3991-5bac-aee5-761bcb60cd4c",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ba0c80e-c673-526c-ad09-2cbb67a72556",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d7b7d17-326a-586b-903d-61d8c6dca129",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b44f58d-3bb9-5eda-9401-d0a3f812be02",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2dce4cab-d4b0-5aad-a490-3667ec3c5b10",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e335c990-a76c-5a59-a524-a74a393b7371",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.25-tuxcare.7 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-instrument@5.3.25-tuxcare.7"
    }
  ]
}