{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d8c83d7e-ec71-5a70-b2b0-15619320de65",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6",
      "type": "library",
      "group": "org.springframework",
      "name": "spring",
      "version": "5.3.25-tuxcare.6",
      "purl": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:12f85e14-aa6b-5fff-8b05-94f9e338653f",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18d710b2-a8c1-5eea-8389-de215990e98f",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d4a774d-c36b-5726-b01f-8997719bff4a",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e31af972-97fe-5f74-ab5f-6362b135e614",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8fb3895a-3a0f-571f-b3d0-e441ed85224b",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb23a2b7-182e-5bdc-b2a2-6eceaa50554c",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c483fab2-28dc-503a-a38f-42974abc966f",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e71f820-3d37-5027-8383-9c079587fb35",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd7b0e12-2dcd-5a97-942b-39006b856206",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a60912d5-bf35-5224-a095-fb1d15f323ef",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89325720-28dd-53cc-bf37-8061e184e3c8",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:395380b0-9b71-57f3-a1d3-2601a58394d3",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:847ec26f-ffb9-5475-89b7-92082a6aa0b4",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67f16f02-a953-552f-a984-c92f7b937316",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c41ade01-d134-587a-bdda-c15a7c33e0e6",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47e72d3b-4b71-5580-9d42-935c1b479a44",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0350b764-b407-5fc2-98e0-f4ad16080479",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b994e84f-201b-5544-9f27-09e7383e8260",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec2c3a61-20b8-5a4c-b0fd-701bc6fb0df8",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8194127-69d8-52bc-a6cb-8b97f300eca8",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b47fc0f-9836-5b8a-b0d9-c8ecf72c2d8e",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f1f0dea-33ce-512e-9268-aca8c5a305a5",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e7103dc-56ff-58b2-8a3e-9045974db9a0",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efe604b7-b967-53a5-9187-8bdd65ceafa9",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f65fa3d-7911-55d3-8494-ed5add4cbb44",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5eaddba2-d539-5813-84ee-f900a13240db",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af26c4a8-ec38-5f05-b667-c8cdc13debdd",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7db475fa-aa8d-51c3-aba9-930f75e7a0a0",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb25cca6-2a8b-5cd4-a698-890cb4de3804",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a20d76b0-f60d-5b37-8891-0204f3d1cb79",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2eb9b141-6cab-5d29-95c7-3ba279b9eac0",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b92a8c38-f51e-5719-83ae-0629cd805810",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.25-tuxcare.6 of org.springframework:spring. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8d2929f-ed24-514e-8a28-e4fbe53492ac",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a072b55-bce1-5cc5-a5ac-566b3cf6d763",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27fbfcd2-19e6-5768-8727-3d6ed1019ad4",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b943d86-6a24-5d91-9fbb-0d519aad497b",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d37d018-af4f-542b-a948-799d09e83a2d",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f750661d-b0d2-5e05-ac76-de948fe23eef",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a619eb86-7553-5e3e-a6e7-9229cff26a46",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dec666a9-faaa-5870-bd6b-3cfdea833ce2",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb040ce7-60b5-562e-ace8-3f216498f824",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a55452d-99a1-59f5-8544-f9e39bcdae00",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3510f9be-000c-5111-8676-888684d6aee1",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02b84f60-9dcc-5893-9b47-5f221322c320",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7d3c837-0c55-5109-bbd0-19ba9fb2b540",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:262d790d-25ef-5aac-b61e-796f88da57c0",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b91337b-09f0-5209-a3a9-6d5b1afd7cc4",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4a34e10-4965-50dc-b2a6-924787ca66f6",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:548bc82f-04b9-537b-8674-e39dbe7dd1b7",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4dbbfc70-7e13-59f8-ba12-e587dfc4f543",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4552a747-b28f-5eba-8438-2ce4fcc5ad97",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ec21ab0-e503-56a8-99c1-80f9bfc44183",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b71d55e1-50c1-5d4b-8eef-39a2ccdf76c9",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.25-tuxcare.6 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.6"
    }
  ]
}