{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:668dde1d-c8f0-50ef-91f5-61e2d18752f4",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7",
      "type": "library",
      "group": "org.springframework",
      "name": "spring",
      "version": "5.3.25-tuxcare.7",
      "purl": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:7d51a7fc-51df-58a9-a6eb-440ad3a2b9d0",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a78165fe-bbbb-566f-87d2-51e9216d3eea",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:559455f9-1f22-5b71-9132-9ec36f05c0cb",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21b88440-ad0a-5600-a929-7e21bd6b4f1a",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0a5c567-02f8-5b49-9637-ad2dc40903f9",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5c09026-d0bc-53a0-b882-7e16671b094a",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43558671-ecae-51a1-9d9c-9d1a2b2c58ea",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:890ae619-294e-5190-a79c-f4d5cfc477a3",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e107a84-7aa8-5c31-b28c-9aa8c4790052",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d4c20a8-c0ca-5ac1-b667-5a3fccfd4e24",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:800632d2-2a61-5e08-aef3-f8ceb2d75688",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf69a51b-bbda-5a60-bd7d-24a0e7db7e34",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:272c1efc-9fd7-569e-b3c7-af53aa203e42",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bba517b7-f08e-5584-9b67-bde38f1b3100",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a01b0a9-d662-5154-8190-4120f1699889",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe125158-99a0-548d-82b9-86d19297f909",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b30ff3c2-d93a-5e77-9c48-8299f83b525d",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e129767c-8c58-5bdf-968b-c556b833b8a6",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9cd16f6-39ab-5b1e-b678-b3a894312a31",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0718acd7-fb31-5dd4-aecd-ab7eab7df312",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4eda2628-8909-5e6a-af6b-50d6d886820e",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8465cb73-697d-5609-bbf4-7c5735c9bb3e",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b76fe630-59d5-54db-9cd1-987c96fa0941",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f659d328-8736-509b-9139-71f442c4685e",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6368c1d4-4205-508f-be5a-897a98ba5044",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb5f1998-3814-54e3-a702-b8afbeb59f0f",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90561264-9416-5c67-82ec-aa017d132271",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d641b60e-8b76-5310-a721-dd57a1b04246",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9187ee91-fe0d-586b-91cf-6505fbe679df",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:138263a2-f6cd-53af-8000-6eae88d34e3a",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d271e414-c6ae-578e-881a-c1c8bbc99da8",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a7432cb-d4ca-5aea-9c92-b2f120c83fdd",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.25-tuxcare.7 of org.springframework:spring. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5921241-59dc-5e2a-977b-bf77465e68a5",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:148e544d-cc1c-58d8-bbad-3718070b5d06",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26eb9184-e787-56f9-98fd-4b892c2d4e50",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47462868-a4d4-567e-bca2-8e8508b3c6bc",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d89985c-f77b-5b21-ad80-4960c4e48eb6",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45434d1d-bf1a-5229-8416-e8a37eb69427",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bad2435f-b83c-5459-b1d9-1697cf28197c",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4edf447e-3890-505d-bb97-627003fd3cc4",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:985a8d6c-370c-5590-aa7a-7715c5965bab",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5097a7a5-4fce-5fbb-aefd-9ca31d36a194",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9e9266e-2cb9-59da-8c95-7c8a89d0cc7a",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6b55967-ccd2-570b-9a61-48854b1aadc3",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f93883a2-38ac-5806-9bd8-ab54c95f58dd",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0b3f43e-d342-5941-82ae-668026daff6b",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c352302b-515a-5a82-9285-3249db8a4e2b",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c453022-0fe2-5cc0-999c-7ee13388e516",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f1508ff-464b-5847-85ec-59ae93f92b7a",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c9f2dfc-f6cd-57a9-93dd-46d784aea315",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d792b4f-9f7e-547b-96d1-fd25d73fd94d",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91828fd5-a128-5b87-a23b-8c951bce3f03",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3496adaa-f1c4-50b6-9214-0dccfb71d2d9",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.25-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring@5.3.25-tuxcare.7"
    }
  ]
}