{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2130efba-5e3d-5819-a35e-04233b85a68c",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "5.3.25-tuxcare.6",
      "purl": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:0742e291-2522-5a32-b593-051b76eb0270",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a029de59-1ebd-5a66-a8f0-7f4edbf800c3",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b645a3a-bdd8-5ae9-a8e5-13ebbd232575",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82512173-1cdb-5a80-986a-a823fc6aed67",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efb057e9-095a-5dd8-9f2b-5d1c6abeced1",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93541cb8-3bfe-5c01-9ade-dfea7ac49c66",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c48d8a61-dfb4-5cbf-8def-f6a52fd8d10b",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9aa9bbd-f6c5-5d72-99fe-491773cd5209",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04768abd-784b-5ce8-a3e6-e4f3a2686c30",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25c05fb3-97ac-5840-a967-f5d721f248ac",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e490e3e2-85d7-5d2e-bdf5-64de5aa18818",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cae32dbe-e1af-50f1-bf43-dd6066cfef62",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56e4e862-ad7b-5afe-afe5-bb982e1d6b32",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce58b444-ead7-57a1-b22f-e8530ee4baef",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba99d26a-35ae-5303-8aa0-e7bc06599e25",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb656c95-fe1c-597e-bdc6-d0d00b17af5c",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4083a9a4-43de-58a6-a031-7b8b03dfac3d",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a09fe4f-fd67-504a-adb6-0e84f2adcc80",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:635f72b9-7156-53fc-8990-8aec0c18b1c2",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07d1de01-802f-5521-b5fc-e432bfc193e9",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:616bc280-a2ec-51f0-84d1-07192ada8ddf",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd4fab1d-c82a-5e5f-b484-b2b85ca2613d",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4487832a-582a-50d2-bdec-30befdd2692e",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eca6fa0f-a944-5dea-b361-5b5c7527ebed",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49cb4180-06ea-5431-8a2a-612bb75d1031",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbe66ca3-29c8-54b0-b6dc-61832b44fdf5",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0b96268-a4a3-523f-b0be-ea5d82ae58ba",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d65a7e2-09c4-5d95-8cfc-69a456330ad4",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:308930f7-6f97-55b7-8c15-b308ad34d44e",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfefc297-1892-5656-93b8-26c0a74cc77f",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86350926-8d75-5bea-aa4c-d9dec7534f4c",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:faf49c71-f47a-5b25-9172-d13a2b5d2c96",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.25-tuxcare.6 of org.springframework:spring-orm. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c88fac3-b626-5e5c-b278-da91688076d9",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e56d6543-88e0-5e25-8564-1a09469d382e",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac0f2b88-3bbb-563d-9c2d-a707dc4ab94d",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a75d5b4-799a-5bce-bc62-3fb3c2ad6a8b",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74a38ad2-429c-5bef-ac9d-a48f50f53f4c",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:beea23de-eca7-5370-a824-f229e3009ef3",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05762c12-54e0-5432-84a8-e0c1906f46ac",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06a9533c-0b68-577d-8fcb-5e324a8a3bc9",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d781315-24cc-50bc-8815-93c6282e2a73",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc189f8e-0e6e-59ce-8ed0-83b2d81dfd73",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c389a21a-757e-57c9-bcd4-bda79890321b",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed864a9f-765b-5919-ac6f-a662ecb8a08d",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d132a097-7b01-5ff4-b881-4467328c9103",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8082075-7f8e-51e5-9e7f-561bbd4a2d56",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e26457c-a492-5300-bd03-0a03bcf02894",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8df9b44-5409-52ec-9883-9c70c7fa17e7",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93e1ac22-fbef-5f83-8b09-5f958f787a5e",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96079f73-6dd2-5303-b5a3-6bfe2fb156ff",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31542aa6-17f0-586e-8cb6-46a2d0224343",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d062f0e-4864-5ad2-854f-4c99e057756d",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4a7b663-5543-55f7-88b6-6eb36c70af1e",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.25-tuxcare.6 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.6"
    }
  ]
}