{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:774d9b66-174a-5595-91c2-98cb3752db9c",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-jdbc",
      "version": "5.3.31-tuxcare.11",
      "purl": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:2567909d-213c-52f6-9ed4-539ef0cce7b3",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65ddc4c8-6ec5-5269-8641-2572c8bd04cb",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c90973f6-4278-5147-965c-cf7279fbedae",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:352bc798-1a80-51ef-9b33-fdf633647ecb",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:607bdc68-f4db-5d3b-b256-02cc4d244add",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4603e504-68e6-5149-b4b3-84743a13e655",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc477cfc-5d13-50bb-8be8-8c53f1dea4a1",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c7cb7a1-7c3f-5de6-81ca-fdc3a8a277dc",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1e24403-3550-546a-8a7c-ed17af2addf0",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7750af1-86dd-565b-a9e0-53b3ec82c991",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9cb8441f-7af5-522c-bb89-2561bf91d63d",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:006d52c9-c367-522f-a110-be1a5a514ea2",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-jdbc 5.3.31-tuxcare.11."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e27374f8-9f58-58d0-a447-1fbc5719f775",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ac47e73-594d-596a-8d97-febada5b02f2",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70f9064e-43dc-5c10-8ace-cadf137329ab",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58c983d1-d789-5744-88aa-fc85837571f1",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:464fa7a9-149a-57f0-bb9b-a58db70a8d30",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f39554b7-b8fa-50f5-bb19-2bf89e12181a",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:463a137d-4933-5de7-82c7-f463db29265a",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:897d5505-d105-5cf6-b148-3ffa4606a0b9",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:043e752d-6c79-5771-a418-d7b2ae84c5d7",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:054864c3-4a58-5360-9c22-40af9bf2482a",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:873b4327-0da7-5347-a726-03ca2d6225df",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc. already_fixed \u2014 The target repository (Spring Framework 5.3.31-tuxcare.3) already contains the complete fix for CVE-2026-41840. Both required doOnDiscard handlers were applied via commit 615477c88f (labeled as CVE-2026-22740 backport) merged on May 4, 2026. The code changes are byte-for-byte identical to the upstream patches."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d7ad0d6-6312-54b6-a2e4-8d9ce5ccc4bc",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8d4d5b4-e769-52f1-85ed-5e7bca773d0a",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ee024b2-9d6f-52e5-87d7-0ddd8cc60bd2",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b43ca242-8666-59a9-89bf-25dfce7898d2",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9461e622-ec3e-54f3-b20d-bf1dd0f66686",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1fb7e76f-3483-52cd-aee3-ce5dd2bb907c",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc3d6c6b-ea73-5f58-a882-9c5380552043",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9b62465-b579-5c50-ae73-97c567ec4624",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:652b9c32-11f6-57fe-a6fd-3506743e56a5",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9151d845-8bd1-5294-b673-ae910ba756cb",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0b9806c-9056-5e2d-aed3-95ec049a1f50",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36a9d540-5b20-51cb-b82c-af6000816d51",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dac982cd-e056-5ba0-b5cd-a98e7c0e9bab",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:944c3c99-7ce0-5d67-b051-08419d3c73b1",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db30a281-cfc9-569a-a7fe-d3c878befdf2",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4c1bc5a-14d4-553f-8325-5d255d15633a",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c34fd58-79ee-561f-9ee5-63d36a9bf6af",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e974314f-533a-5f92-97dd-7450cd3f1a15",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:592ec4c5-d7a2-5264-a0dc-79f334ee1d75",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a45224d-47fb-58f8-ac2e-a55780e00969",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a6c1be3-bb55-5fb9-9705-b7b79ce9ddc4",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de2a7376-287a-5320-b0e8-07d89566437c",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8048802-c3c4-5da8-bf60-68d0791286fe",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04e25ef9-ad13-5798-98c6-86b32d7ec061",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71209089-ed3b-5812-8c55-10d1f3e0ccff",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47e2d582-ced2-5ced-8d4c-c211c9cf6762",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12b2d58d-0d7f-5a79-bde1-d8fdd3f4f675",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8dcddf1d-fc7c-5849-b5be-0bce39d348d8",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.31-tuxcare.11 of org.springframework:spring-jdbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.31-tuxcare.11"
    }
  ]
}