{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:773c951c-cf5b-586b-9533-a521cf4943f9",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-tx",
      "version": "5.3.27-tuxcare.5",
      "purl": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:de0971aa-b55c-54b7-a1c4-c45d9166cc04",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:856bd7b8-9a7c-5fb2-beaa-7aabc7e4a43e",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7867bdbe-2e1b-5865-aafa-23f4bed2cda3",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:420ea77e-2e35-5124-9fed-ffef8e61803d",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e5dcaf0-f1e9-5f78-8e15-196ab4fc9dbd",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da3d8290-f240-5aa3-a8a1-0eb576152570",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d0b5718-a849-58aa-aa4d-20fbcbcd17e9",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f802c82-4300-52fa-bfef-766d4fab49ee",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1f95de3-51d0-5d42-9c0c-e0d30a35887c",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b942ad02-e9ab-57cd-9f65-65485686acdc",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ad7e040-c5e2-516d-b17c-16220c4f6e5e",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf1615e4-3850-512a-a207-4a42e11da066",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-tx 5.3.27-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ed04833-efe2-5161-8870-c49ab6c50fb7",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa862a67-6693-5a26-919a-51e5319384ed",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8351b04d-c94c-53e9-b296-e71dabe92bbe",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:418c6aab-3da9-5fbf-ab32-271f1b8401b4",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7649986a-bc81-58a6-a721-b87f94d780d6",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a129e6d3-8439-5e98-8e71-ee4a66a8bf92",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1dfec77-bf73-5b7b-b5ef-8a19fb2aaa8c",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22741 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8be9bae5-b119-56b1-84dc-67fa9d8d19dc",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22745 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d91330d-4a19-51ea-962d-238d2b46a8d5",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d29913cc-a0ee-52f4-81dc-193dacc8c482",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a9185e4-1b3f-5c3a-a396-05fc93b0a54f",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.27-tuxcare.5 of org.springframework:spring-tx. already_fixed \u2014 The target repository (Spring Framework 5.3.27-tuxcare.5) already contains the fix for CVE-2026-41840. The vulnerability was previously addressed through backport commits for CVE-2026-22740, which applied the identical doOnDiscard cleanup logic to prevent resource exhaustion from multipart request processing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19ca5186-6367-5a81-9e0f-9dc38148fe15",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ff1d5f6-2ff2-56c8-828f-ef0a78ea0f93",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d396810-3aab-5602-9d56-8c92fbabd784",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a83f53da-4d84-529d-8413-097e6f87c7a1",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41844 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9da389e4-0692-581b-81cd-433f1a1f4aa5",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41845 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ac7596d-f833-5aaa-b4b9-8e978c7476a3",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4bdb1b2-f330-53a9-af0b-d5b39fe0ca41",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.27-tuxcare.5 of org.springframework:spring-tx. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:248ae86b-71d1-5d89-8927-6addd911d029",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a94b2a4-f9f1-5b28-8a32-e74074dcb7c6",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4cc6938-05c6-5410-bce7-f57df94c7f91",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c2fd1ed-7bbe-56d2-9dc9-f4c7f4784b65",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af460d52-85b6-5e49-b0de-d0e9bd836d09",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24fac7af-de3a-54ef-a643-7792c315a285",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70c15c63-4e0c-5837-9bb6-4d2f7c2472fb",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36285e37-df27-5bf3-9550-35f17f09a77d",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afd9bef5-2d71-5d89-91c7-a7ab70cd0207",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:058e627d-4d07-512f-ad4a-968f9399da29",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f3a1b8e-845a-56bd-8690-2bc95e470644",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1a419e1-4d3b-56ea-a63e-f37caceb3ea2",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b034836-6692-5e26-9d7d-edd3028417e8",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5dfff57a-92d9-5286-a561-ee0ef1dc8053",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3dda5965-aba9-5bea-a45a-60c9af0777a3",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0aa2c18-65b7-5540-8524-af567595cb7e",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0389d297-e64a-5646-a14c-dc00132ac6db",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db5dfb49-091a-5818-a13a-753cc8e64336",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85818047-4cb1-59a2-8d28-d5078b20cbe8",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8dcd5ee3-14e4-5def-8121-7a6ddc9a74e2",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52270918-8107-566c-a547-c42f4221b9ab",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.27-tuxcare.5 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-tx@5.3.27-tuxcare.5"
    }
  ]
}