{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7dcb526b-ec5a-500a-aec6-7bebe1328535",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11",
      "type": "library",
      "group": "org.springframework",
      "name": "spring",
      "version": "5.3.31-tuxcare.11",
      "purl": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:63548bd2-4df5-524d-b857-a2d0d1527e52",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64d992b4-b17c-5cf3-8f5a-bc01d810cf08",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e4c7aaa-cb00-53ce-8a74-a9e5c4002b8a",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc22e8f7-ecc7-5583-a98d-d36a3cee13bf",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97fe83ca-3dd7-568c-ad96-117aa61af5d7",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6df16b0e-067c-5bda-981e-54dc729519f8",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aff920db-99ab-52d1-95f7-9175434fd089",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c26ffe03-e750-541d-8a93-df874a941acc",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e41c4fe1-edd4-52ad-9e49-878fe2264456",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d493d3a8-ba77-503e-990f-68ea0c6922a3",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23eb7ec1-1ace-5453-b30b-f5e4ea6379bb",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8b10760-8ee5-5fa7-875e-d27a784548a4",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring 5.3.31-tuxcare.11."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:904da5a0-5553-58a2-9656-aee1ece614a0",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d116d2f7-3256-5961-b332-c72fbb515fed",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67808acd-c309-5433-b521-25bbda735919",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ff27843-451d-5463-a2cf-535e6e619cd6",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5764932-4454-5ea7-9e96-979674c7cb60",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e2c38a9-ce37-502f-a612-0fdfdb312671",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ca46e8e-03fe-5cc5-b789-1760a4e9bacf",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ba81809-bb9d-5455-b764-140b6ce52cb0",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dbbb57e6-73d2-53ff-8980-be7c83e6e0b1",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eec46eca-ac27-5e21-99f3-4bb65cf65635",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ff9b5fb-2a1a-5748-a422-2715876b83e7",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.31-tuxcare.11 of org.springframework:spring. already_fixed \u2014 The target repository (Spring Framework 5.3.31-tuxcare.3) already contains the complete fix for CVE-2026-41840. Both required doOnDiscard handlers were applied via commit 615477c88f (labeled as CVE-2026-22740 backport) merged on May 4, 2026. The code changes are byte-for-byte identical to the upstream patches."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b056dc73-2990-5cbe-bde4-47f365df1460",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:324d9c78-5438-5bca-97d3-2f54bff2df9e",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da64f2b7-5194-54c7-94f0-7217ff315899",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36decd84-8867-5171-a936-c3ef73348a6e",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8fc404d4-eab9-57c8-9cdd-725d71501812",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:def5a460-f27d-5574-a49f-5a972de1697c",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7c62d4f-1d7f-5bae-b73e-dc2ccfb99bc1",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48eae8bd-6634-59f7-92dd-170d64dd1b3c",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b15345eb-8306-503f-8bd1-bbc782487b95",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0595ce73-9188-5d53-b117-27b543e2fc22",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:793e7ac3-2c48-59a0-a38e-cd29d2f9868e",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59d05567-10ba-5e3a-ac3f-7c7a9ebf2be0",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49307e63-33a5-5073-8075-be2ac4c3d1ea",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0cd91301-a6f9-5e6f-8254-5505ed5356b3",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6e93da7-06c2-598f-a0b7-95a1e662aee7",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fdf12d45-9f1e-541e-84db-963ebeb9d769",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:306b0c8a-97fc-51f3-951d-7927408bec41",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62f8b5e6-2323-5c59-9c22-5e83c948d593",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75596d28-b9f5-5127-84ab-cc397e48f462",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e853ec80-126b-52ce-9fd4-f86446e9ca34",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26b22293-3612-57f5-9595-d0ba63f22dc2",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4f75d58-b4a2-53f4-ad6e-55da0dd88c57",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eda51132-5955-54ec-91c8-d2b1d3a679ee",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2078c20-4c78-5aaf-8f1a-50281916624b",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f54099a4-a70b-5dbe-bdd0-0339343134c4",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2c1522f-1423-53f4-888f-ba29369d924a",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ce2b7cf-a6d2-5360-9eba-1ca11eeae04c",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:692cffb7-466b-500b-97e4-b9335be42874",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.31-tuxcare.11 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring@5.3.31-tuxcare.11"
    }
  ]
}