{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4c328cc6-30fb-5d32-8cfa-144d1c5bd382",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-tx",
      "version": "5.3.29-tuxcare.8",
      "purl": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:a87213c1-7870-5890-a33a-a2ffcdcc8a7d",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09ee694a-a29b-5e4a-9933-0e66ca90abc8",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7744dbec-38c6-5d26-86cc-f853b1482b69",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e566234-d90c-587c-b3d1-bf8558a34307",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ccc43c0-9b45-5786-b865-37c60b9f5206",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbb23c76-e9c7-591d-b81c-d0f430d8b2c3",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87e5cafd-b4fe-5549-892c-3d066c2cd7ed",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:042aa6c2-a619-545f-bcb8-93f8234e2116",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0431ef32-26cf-5d3e-a11b-614d105efafa",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50e4b646-f063-5683-add7-a263c0e64b93",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39b54517-f9fc-5c46-bbc3-d289985df489",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2698ed6-dcef-5de0-9931-75cadd7eba3d",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-tx 5.3.29-tuxcare.8."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e06aac21-47de-5da7-b392-9237860dfe26",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d62e185-33f5-5841-b3c4-b4ff4611ef66",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:468c3bf1-65cd-589f-ad5d-04324d0540a5",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e2cde3e-10de-5c30-88d2-23482c4d1a7a",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1699c196-5048-503e-bb28-666bb8f24dc7",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fe98f9f-7f9a-580e-878f-aef777b0dc4c",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ebfdf63-8b20-5339-8250-915ddd6fbc64",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f17cea0-1068-5ed3-9d60-c67076b39898",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ce13648-d99f-56d7-be64-c68fdcf37bde",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e049d86-a8de-52fe-af6d-b2da791626f6",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:052ad4db-bf39-575e-a758-2beff92b1de8",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.29-tuxcare.8 of org.springframework:spring-tx. already_fixed \u2014 The target repository (Spring Framework 5.3.29-tuxcare.4) already contains the complete fix for CVE-2026-41840. The fix was applied on 2026-05-19 as part of a TuxCare backport for CVE-2026-22740 (commit bc0026ae70c), which addresses the same multipart request DoS vulnerability with identical code changes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8e817fe-7f9b-5d1c-a775-3087bd86deb4",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1610f5f8-cb8f-5df6-9530-9c99b7a77263",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab397732-0ce2-5d71-b285-0a04e288b93c",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:350e1fef-d55d-5366-8c4c-f8526f5fa07a",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d3cc6ee-b082-56bd-aaa1-8c770efb6405",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5a0cd74-4f36-5fec-b1d3-87f46b983579",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68ca9c9b-d149-5214-8669-e6bd3ef24c43",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:629830a4-4981-5aa6-aa9f-ef23d1d6622e",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf08209f-bdc4-5ff2-afbf-0a42e67d4d10",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bbb12b6-95ec-5ab2-9d10-b5b8fcaefba8",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4071e88-9e95-5a18-99d1-773180d85b48",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b56d0673-2f33-5900-99ef-e4167d40300a",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f837f492-f968-52ff-8269-78c72ce744e9",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1583018-5c32-52e6-81c9-56b2e54a9a8d",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14d8acde-16e0-599f-b8e3-97fb59939bc8",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91641694-3555-5e87-83e8-6add03b32ba7",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48ad7f2b-f499-5696-bab7-5abbca344ec5",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca27a0d5-c7a7-5e32-81b2-cc7f0ad948a2",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6ca42f1-0dfc-57f4-a033-7e12d1a60565",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03943d93-f65b-5bd4-b110-46c9e960bf3f",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cb01f70-bdf7-59ac-bbdb-15663612327e",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f0fd41e-0325-5d3b-b237-2a64e846989a",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75e6fdf8-aa01-5a16-a19f-14b3e20a283a",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76241148-3a99-5947-bfcd-4928ec10ad36",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5a34abf-c4b1-5630-a13a-7088ff9f5f9b",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3391c82d-5095-5f57-9a5a-d9d46f228729",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de22ea0d-d7b8-56a5-8505-8dddd25f55ea",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d6de108-c1c1-5cbf-ae55-171d91c369c6",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.29-tuxcare.8 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-tx@5.3.29-tuxcare.8"
    }
  ]
}