{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:deaf6c11-dab4-5a75-9903-cd434be0f65e",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20",
      "type": "library",
      "group": "org.springframework",
      "name": "spring",
      "version": "5.3.39-tuxcare.20",
      "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:293d9375-85c3-5d07-8bcc-a626b81766f6",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a143e4b0-3b0a-536a-a2f1-4931f324ab83",
      "id": "CVE-2022-22968",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2022-22968 does not affect version 5.3.39-tuxcare.20 of org.springframework:spring. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89e77592-6732-59f2-8cb4-b3016e77bd47",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1f61957-0d50-53cc-ac86-05eeaea16870",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0f360bc-c2b0-5682-a876-d6e255213327",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1631822f-ff0c-5d3a-9c8d-5a93dc3531cc",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c79bdc7-ba35-55f5-a5f3-7bdbb0ee90f3",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28365d43-42f4-59ea-a1ca-3edf78cb5892",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring 5.3.39-tuxcare.20."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e303bb31-e4d4-5057-8ad5-849ddda07906",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f7f6162-e90b-52b1-b3ec-2a7d680d6e26",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62385f8e-7c36-5076-8065-147c5d94ec07",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3d8cd1c-fb91-5bf1-b24e-3725f9434923",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1c335c4-ff50-5488-ae77-64acd893eb59",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9b9a151-7342-5d55-8017-8def33464b14",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9099dc96-d7c7-5be0-ad22-f8d3ce49de14",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a551c4f-921d-531f-b322-29fdbe0d5db9",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc8d0a08-9370-50f6-ade5-399a7a39120e",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42eeb59b-62cd-5f49-937e-c961379fcf89",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3632aa08-fe15-5ebf-8e98-6651cd3f55d4",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d3d58bb-a887-5313-a12d-11f413ef19a5",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9788e45e-6288-5f3e-883b-0c8d545a0a03",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1d80715-500f-59d1-8f97-39eef8476579",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0148fe5-45fd-59c5-add7-7c1760d2a2d3",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d9fd505-57ff-506b-a6a8-a4294dc3c620",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:663bd4b3-8ac1-51d9-a6d3-97047afee4b2",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11e5211e-396a-5774-a8cb-865f1a631bd2",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b6da8eb-e699-52dc-916f-74ec79736b15",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d10e62c-ee51-5643-8a1b-70a17028771c",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c515bf2-6d5a-5c8c-aa67-4017b19cb5a0",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b752404-3952-5892-bb8f-e112a7f0688f",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03ce6fc9-5482-503d-be63-0d8c545c59e2",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3918e40-330b-5332-87ad-d0d77e507ba6",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43277bf5-0680-5849-a704-4a60d83de07c",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fcce0a6a-811f-504e-b2e7-dea788742d5a",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0a3b070-9df3-57fe-a63a-ccee94f796dd",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2dce6b01-0535-576c-9aca-3c4857018a4d",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:838e7803-ccc3-5962-9311-e0e9cf5e64a5",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:629ecfa1-9915-5b9c-8c14-e684491d7ede",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7682165d-5e96-5b40-a40d-02283a62f142",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95881194-9075-5bf7-98eb-4f2b9f14c64b",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b51962b-656f-58e1-85c3-cf2ac0451e9d",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5217a517-1180-5e2e-b47e-04cc7795dd04",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:622336c5-ea35-544b-b66f-6016f3549c46",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f11ea92-f3a4-54eb-bd08-f369a46d62f1",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc8caef2-42ef-5712-8e80-3e6c4a586d5a",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab51459c-2e5e-5590-8474-109d256e86e2",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9924f7e8-88f9-55df-990e-fecd44af9337",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.39-tuxcare.20 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.20"
    }
  ]
}