{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:aa7adb41-5877-5cfb-874f-686184c14fed",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-r2dbc",
      "version": "5.3.29-tuxcare.6",
      "purl": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:3280053a-0363-5682-a349-4977c7737b87",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4fae4fa-76a0-58de-b027-d9cda35432f2",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d82c100-26df-5702-a8d8-151de1f147d2",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b47b1fa0-d9f8-5f6b-8e0d-4f2a0045af10",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a6a0f9f-635e-59fe-96be-dde597724f56",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0502dc5f-eb8b-51cc-89af-c9439cdaf6c6",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e45ba3de-bfd1-5c4e-a0e8-8ce07227f441",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc532bb5-c385-5caa-b880-7df945639789",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f7ba732-abd2-5959-bff3-e12214d77b4f",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e85bee0-2158-564c-a3ff-c0c375560c43",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8346f36-1d8e-5da8-975f-9db0d141e7c3",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25ff8eda-c0f5-576c-b671-795f7931d284",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-r2dbc 5.3.29-tuxcare.6."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33055ac1-7c4e-5537-a8b9-b51c47783627",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fb69584-2cc4-53be-9d2c-5bad9730681f",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33a4553b-9581-5ca1-9911-64c8d6aacc0c",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5988d89-18f7-5689-93e3-32b799733ae6",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3ce2d3e-0ea7-532b-941c-273a3634803e",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93053bd9-eadd-5c57-872e-c25518663280",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c324e033-858f-50ff-b697-3a9cdeffe9ce",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1413d892-e7a6-5ba5-aefe-4d8abad32422",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0e67545-17cf-58fb-886b-84144921c0d6",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33fd9477-ac06-55cc-887c-9605cd2cfc18",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d568f20-4931-57d9-8a06-91663512d7bf",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc. already_fixed \u2014 The target repository (Spring Framework 5.3.29-tuxcare.4) already contains the complete fix for CVE-2026-41840. The fix was applied on 2026-05-19 as part of a TuxCare backport for CVE-2026-22740 (commit bc0026ae70c), which addresses the same multipart request DoS vulnerability with identical code changes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed104d12-e790-5c8c-aa99-82ec03ee0c9a",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4981cb6-1670-5cb2-ba8e-dd948d3e25d2",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81afe541-540e-5e46-b2f2-30fdf7b3e9da",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b072e5a3-df48-5972-8454-a3c0ce8db630",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e44931b-e4ad-5714-aa30-702d5bfa9e5b",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28e3bdd8-8a09-5525-bc15-6b0dbd70b613",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a383af0-f571-5559-9adc-7fd02b34a7ed",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7affbb8d-354f-5d96-993b-18e00667a180",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:665fbb4c-70ce-5829-a9d6-67c2409b61b0",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd205e70-c203-5078-b125-21c02b8327f4",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8fe65169-7819-5b37-9329-ef78d82a5bb6",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:865a6346-2959-528b-b1bc-f112625a4bfe",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:441ed504-f2c3-5a69-bef0-26c1a9b89335",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a66f1225-2f19-50eb-ad4a-c8ea6a140b59",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c33ef53b-914e-517d-a0c0-1b853d3bae73",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5a9a7bd-8daa-55dd-a0ce-e45f31712246",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8992622-84f3-5d72-986a-d76a57840e66",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d887beac-4110-5f1e-bea8-68cd381c398f",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b7e398b-e8b0-58ab-8c8d-c5c8ed4c3d2c",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72ff11ca-620e-5724-8ba6-0d9e06e93aeb",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68ce2139-ff2a-5adb-8129-3389d5e7c4f4",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48a0d5cc-220f-5670-8af3-2da08cccb1de",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:607bd810-4abe-541e-93ba-47b43a44f8c7",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6df5307f-aceb-5aba-a40d-6f445ea973d9",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e9ac935-ffaa-515f-84d6-00ea9152d68d",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0465adb5-4b3f-5522-8d08-6423b9ca814f",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41ea40f7-47c5-52f0-8957-854b30877f8a",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8b04380-ee4e-500a-98a3-e7bb5ea0bb90",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.29-tuxcare.6 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.29-tuxcare.6"
    }
  ]
}