{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:cfe6d2ce-3427-5953-bcc9-7813c7df5546",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-web",
      "version": "5.3.29-tuxcare.7",
      "purl": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:c1ccb8d4-11e0-53d0-b152-c8461e24cb6a",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:166ee953-e559-59af-9c9c-fc3cb09827a8",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f25cdca3-c43e-5c9f-b2a8-275ea9d01d23",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba715d58-f6d1-5f34-be4b-e9d87a2f3892",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8c70862-df6e-5977-8ef1-c00a4ed9ba2b",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb2ddeba-cae7-5ec0-9deb-19a44a34bc55",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a58be7e-bc79-5786-82d8-b945e70adab5",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e41fd87-819b-5870-841b-ec811498e6da",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a85e9499-db5d-53c3-918c-a1dbcb6f4732",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:325d0104-8b5e-5aed-9d4f-eb0779461b43",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d99788f-6d28-51c2-bc9b-def2eb2ce0aa",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54d9f8a3-f08f-5da6-854d-32cafa8f9dcb",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-web 5.3.29-tuxcare.7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d3ebdd8-d6aa-53bd-a779-1d6b0556dc5a",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c85b3422-cb2a-500b-bcb3-2a021ef781b6",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:550a614b-746a-5cf2-8236-87aa29b06fca",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2831372-2e43-5b2a-a798-d6afef736e15",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0234ac79-3792-57fc-ab79-ac974bb01ca4",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3512b45b-2268-5987-a467-6890276ee1f2",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08858756-55b2-5d54-a22d-e2ca45410832",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07c2ff99-f860-5c31-8cb6-5a43a6580cc2",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4015df03-f99f-5eda-a38f-b86953ed30d3",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2bbb8308-eda6-5e4e-83ce-29e2ef479fc0",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b42216c-2f29-5aaa-93d3-e16b51b4cdb9",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.29-tuxcare.7 of org.springframework:spring-web. already_fixed \u2014 The target repository (Spring Framework 5.3.29-tuxcare.4) already contains the complete fix for CVE-2026-41840. The fix was applied on 2026-05-19 as part of a TuxCare backport for CVE-2026-22740 (commit bc0026ae70c), which addresses the same multipart request DoS vulnerability with identical code changes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7b13574-903f-5f5e-9f73-3348aa3a2c27",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dcd89477-792a-5402-bb87-8b801f8d3bc0",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8af79e1a-7124-56d6-b7a9-420ed2d2cfb4",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c901430-f97f-5329-961f-619dd7e862a1",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:811d3d35-8793-5f22-b68b-a9ec8cac92b4",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a8921d4-1180-5d67-abc6-f9baf733a84c",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e6c7006-aed4-5db8-96e4-5330e73e2980",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46d3dca2-c31c-5559-b99e-4186333dc3fb",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5dd8911b-8d65-50a9-bb91-f2bb8a680ea7",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e8985bf-c11c-5765-8256-3a839e23c8e6",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37056c19-03c7-53fb-8146-b213b61b811a",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6dc71b3-2044-5915-b056-ff04a73b420b",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8865e45-777d-5a62-839f-cd13766c93c0",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6975b77-13cc-5f47-a445-927f8412e726",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a26b37f-d200-5453-937a-4b5e1b29d27b",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4c9c7a4-2101-5e27-924e-21062eab4f77",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a796eeb4-4680-5a74-8178-69fa390ff2e3",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85e5b879-f505-5a01-87c9-0bc5c34d6fea",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7cea2ea-2dda-5bef-8ae5-58f6464023a0",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:800aeabc-8ce2-5eff-bf22-e0d0951136ce",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c6d3341-298a-5ef4-9836-d7c4050e443d",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09d43aab-ae27-544b-b5db-d7fa9888b1bf",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a814aa39-1911-5859-a28e-bb3299f1e3ac",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23a0dec2-2cb1-5803-b0a8-b8d630bfe9d6",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0674efd6-edfa-5b66-a409-03170bcb15bf",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6899d38-a574-584f-8bff-27fba71a5f64",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:613af04a-1070-547a-bb14-70e85742e4ca",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9cdb3d99-9767-5c36-bfdd-edf3e5eac739",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.29-tuxcare.7 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@5.3.29-tuxcare.7"
    }
  ]
}