{
  "@id": "urn:uuid:3f539630-6104-45ab-b789-70c766a68923",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 29,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-29T03:58:30.759519+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:25:11.687376+00:00",
      "status_notes": "Vulnerability CVE-2009-1190 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2009-1190"
      },
      "action_statement": "Vulnerability CVE-2009-1190 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:34:36.358672+00:00",
      "status_notes": "Vulnerability CVE-2010-1622 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2010-1622"
      },
      "action_statement": "Vulnerability CVE-2010-1622 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:30:41.069534+00:00",
      "status_notes": "Vulnerability CVE-2011-2730 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2011-2730"
      },
      "action_statement": "Vulnerability CVE-2011-2730 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-29T02:23:11.597840+00:00",
      "status_notes": "Vulnerability CVE-2011-2894 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2011-2894"
      },
      "action_statement": "Vulnerability CVE-2011-2894 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:45:22.088279+00:00",
      "status_notes": "Vulnerability CVE-2013-4152 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2013-4152"
      },
      "action_statement": "Vulnerability CVE-2013-4152 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:27:55.132553+00:00",
      "status_notes": "Vulnerability CVE-2013-6429 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2013-6429"
      },
      "action_statement": "Vulnerability CVE-2013-6429 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:25:11.687376+00:00",
      "status_notes": "Vulnerability CVE-2013-6430 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2013-6430"
      },
      "action_statement": "Vulnerability CVE-2013-6430 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:45:22.088279+00:00",
      "status_notes": "Vulnerability CVE-2013-7315 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2013-7315"
      },
      "action_statement": "Vulnerability CVE-2013-7315 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:22:31.131193+00:00",
      "status_notes": "Vulnerability CVE-2014-0054 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2014-0054"
      },
      "action_statement": "Vulnerability CVE-2014-0054 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:48:07.176896+00:00",
      "status_notes": "Vulnerability CVE-2014-0225 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2014-0225"
      },
      "action_statement": "Vulnerability CVE-2014-0225 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:45:22.088279+00:00",
      "status_notes": "Vulnerability CVE-2014-1904 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2014-1904"
      },
      "action_statement": "Vulnerability CVE-2014-1904 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T23:41:42.084809+00:00",
      "status_notes": "Vulnerability CVE-2014-3578 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2014-3578"
      },
      "action_statement": "Vulnerability CVE-2014-3578 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:42:13.036680+00:00",
      "status_notes": "Vulnerability CVE-2014-3625 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2014-3625"
      },
      "action_statement": "Vulnerability CVE-2014-3625 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:22:31.131193+00:00",
      "status_notes": "Vulnerability CVE-2015-3192 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2015-3192"
      },
      "action_statement": "Vulnerability CVE-2015-3192 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:27:55.132553+00:00",
      "status_notes": "Vulnerability CVE-2015-5211 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2015-5211"
      },
      "action_statement": "Vulnerability CVE-2015-5211 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.9 of org.springframework:spring and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required",
      "vulnerability": {
        "name": "CVE-2016-1000027"
      },
      "action_statement": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.9 of org.springframework:spring and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required"
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:27:55.132553+00:00",
      "status_notes": "Vulnerability CVE-2016-5007 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2016-5007"
      },
      "action_statement": "Vulnerability CVE-2016-5007 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:20:09.538096+00:00",
      "status_notes": "Vulnerability CVE-2016-9878 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2016-9878"
      },
      "action_statement": "Vulnerability CVE-2016-9878 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-29T00:44:47.675175+00:00",
      "status_notes": "Vulnerability CVE-2018-11039 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2018-11039"
      },
      "action_statement": "Vulnerability CVE-2018-11039 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2018-11040 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2018-11040"
      },
      "action_statement": "Vulnerability CVE-2018-11040 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-29T00:44:47.675175+00:00",
      "status_notes": "Vulnerability CVE-2018-1199 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2018-1199"
      },
      "action_statement": "Vulnerability CVE-2018-1199 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:25:11.687376+00:00",
      "status_notes": "Vulnerability CVE-2018-1257 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2018-1257"
      },
      "action_statement": "Vulnerability CVE-2018-1257 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-29T02:48:12.612717+00:00",
      "status_notes": "Vulnerability CVE-2018-1258 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2018-1258"
      },
      "action_statement": "Vulnerability CVE-2018-1258 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-29T00:16:38.201074+00:00",
      "status_notes": "Vulnerability CVE-2018-1270 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2018-1270"
      },
      "action_statement": "Vulnerability CVE-2018-1270 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:30:41.069534+00:00",
      "status_notes": "Vulnerability CVE-2018-1271 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2018-1271"
      },
      "action_statement": "Vulnerability CVE-2018-1271 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:22:31.131193+00:00",
      "status_notes": "Vulnerability CVE-2018-1272 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2018-1272"
      },
      "action_statement": "Vulnerability CVE-2018-1272 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-29T00:16:38.201074+00:00",
      "status_notes": "Vulnerability CVE-2018-1275 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2018-1275"
      },
      "action_statement": "Vulnerability CVE-2018-1275 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T22:02:19.515243+00:00",
      "status_notes": "Vulnerability CVE-2018-15756 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2018-15756"
      },
      "action_statement": "Vulnerability CVE-2018-15756 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-29T03:58:30.759519+00:00",
      "status_notes": "Vulnerability CVE-2020-5397 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2020-5397"
      },
      "action_statement": "Vulnerability CVE-2020-5397 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T23:59:58.436178+00:00",
      "status_notes": "Vulnerability CVE-2020-5398 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2020-5398"
      },
      "action_statement": "Vulnerability CVE-2020-5398 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:38:45.879676+00:00",
      "status_notes": "Vulnerability CVE-2020-5421 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2020-5421"
      },
      "action_statement": "Vulnerability CVE-2020-5421 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2021-22060 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2021-22060"
      },
      "action_statement": "Vulnerability CVE-2021-22060 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2021-22096 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2021-22096"
      },
      "action_statement": "Vulnerability CVE-2021-22096 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-29T00:44:47.675175+00:00",
      "status_notes": "Vulnerability CVE-2021-22118 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2021-22118"
      },
      "action_statement": "Vulnerability CVE-2021-22118 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:42:13.036680+00:00",
      "status_notes": "Vulnerability CVE-2022-22950 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2022-22950"
      },
      "action_statement": "Vulnerability CVE-2022-22950 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:19:00.657885+00:00",
      "status_notes": "Vulnerability CVE-2022-22965 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2022-22965"
      },
      "action_statement": "Vulnerability CVE-2022-22965 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2022-22968 does not affect version 5.3.39-tuxcare.9 of org.springframework:spring. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2022-22968"
      },
      "impact_statement": "Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers"
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:25:11.687376+00:00",
      "status_notes": "Vulnerability CVE-2022-22970 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2022-22970"
      },
      "action_statement": "Vulnerability CVE-2022-22970 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T23:14:38.175256+00:00",
      "status_notes": "Vulnerability CVE-2022-22971 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2022-22971"
      },
      "action_statement": "Vulnerability CVE-2022-22971 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-29T00:40:33.053070+00:00",
      "status_notes": "Vulnerability CVE-2023-20860 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2023-20860"
      },
      "action_statement": "Vulnerability CVE-2023-20860 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:42:13.036680+00:00",
      "status_notes": "Vulnerability CVE-2023-20861 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2023-20861"
      },
      "action_statement": "Vulnerability CVE-2023-20861 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:42:13.036680+00:00",
      "status_notes": "Vulnerability CVE-2023-20863 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2023-20863"
      },
      "action_statement": "Vulnerability CVE-2023-20863 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-29T02:36:49.908127+00:00",
      "status_notes": "Vulnerability CVE-2023-34053 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2023-34053"
      },
      "action_statement": "Vulnerability CVE-2023-34053 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-29T03:48:46.502543+00:00",
      "status_notes": "Vulnerability CVE-2024-22233 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2024-22233"
      },
      "action_statement": "Vulnerability CVE-2024-22233 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:25:11.687376+00:00",
      "status_notes": "Vulnerability CVE-2024-22243 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2024-22243"
      },
      "action_statement": "Vulnerability CVE-2024-22243 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:25:11.687376+00:00",
      "status_notes": "Vulnerability CVE-2024-22259 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2024-22259"
      },
      "action_statement": "Vulnerability CVE-2024-22259 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:27:55.132553+00:00",
      "status_notes": "Vulnerability CVE-2024-22262 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2024-22262"
      },
      "action_statement": "Vulnerability CVE-2024-22262 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:38:45.879676+00:00",
      "status_notes": "Vulnerability CVE-2024-38808 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2024-38808"
      },
      "action_statement": "Vulnerability CVE-2024-38808 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T21:20:09.538096+00:00",
      "status_notes": "Vulnerability CVE-2024-38809 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2024-38809"
      },
      "action_statement": "Vulnerability CVE-2024-38809 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2024-38816"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2024-38819 is fixed in version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2024-38819"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2024-38820 is fixed in version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2024-38820"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2024-38828 is fixed in version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2024-38828"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-22233 is fixed in version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2025-22233"
      }
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-20T10:05:00.136501+00:00",
      "status_notes": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring 5.3.39-tuxcare.9. direct vulnerability is in Spring Framework project - affected versions are 6.0.5-6.0.27 / 6.1.0-6.1.19 / 6.2.0-6.2.6, version 5.3.39 is not in this range",
      "vulnerability": {
        "name": "CVE-2025-41234"
      },
      "impact_statement": "direct vulnerability is in Spring Framework project - affected versions are 6.0.5-6.0.27 / 6.1.0-6.1.19 / 6.2.0-6.2.6, version 5.3.39 is not in this range"
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-41242 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.19.",
      "vulnerability": {
        "name": "CVE-2025-41242"
      },
      "action_statement": "Vulnerability CVE-2025-41242 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.19."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-41249 is fixed in version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2025-41249"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-41254 is fixed in version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2025-41254"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-22735 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.12.",
      "vulnerability": {
        "name": "CVE-2026-22735"
      },
      "action_statement": "Vulnerability CVE-2026-22735 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.12."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-22737 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.20.",
      "vulnerability": {
        "name": "CVE-2026-22737"
      },
      "action_statement": "Vulnerability CVE-2026-22737 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.20."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-22740 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.10.",
      "vulnerability": {
        "name": "CVE-2026-22740"
      },
      "action_statement": "Vulnerability CVE-2026-22740 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.10."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-22741 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.11.",
      "vulnerability": {
        "name": "CVE-2026-22741"
      },
      "action_statement": "Vulnerability CVE-2026-22741 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.11."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-22745 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.11.",
      "vulnerability": {
        "name": "CVE-2026-22745"
      },
      "action_statement": "Vulnerability CVE-2026-22745 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.11."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41838 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.13.",
      "vulnerability": {
        "name": "CVE-2026-41838"
      },
      "action_statement": "Vulnerability CVE-2026-41838 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.13."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41839 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.13.",
      "vulnerability": {
        "name": "CVE-2026-41839"
      },
      "action_statement": "Vulnerability CVE-2026-41839 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.13."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41840 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.18.",
      "vulnerability": {
        "name": "CVE-2026-41840"
      },
      "action_statement": "Vulnerability CVE-2026-41840 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.18."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41841 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.18.",
      "vulnerability": {
        "name": "CVE-2026-41841"
      },
      "action_statement": "Vulnerability CVE-2026-41841 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.18."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41842 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.13.",
      "vulnerability": {
        "name": "CVE-2026-41842"
      },
      "action_statement": "Vulnerability CVE-2026-41842 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.13."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41843 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.13.",
      "vulnerability": {
        "name": "CVE-2026-41843"
      },
      "action_statement": "Vulnerability CVE-2026-41843 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.13."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41844 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.15.",
      "vulnerability": {
        "name": "CVE-2026-41844"
      },
      "action_statement": "Vulnerability CVE-2026-41844 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.15."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41845 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.13.",
      "vulnerability": {
        "name": "CVE-2026-41845"
      },
      "action_statement": "Vulnerability CVE-2026-41845 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.13."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41846 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.13.",
      "vulnerability": {
        "name": "CVE-2026-41846"
      },
      "action_statement": "Vulnerability CVE-2026-41846 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.13."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41847 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.18.",
      "vulnerability": {
        "name": "CVE-2026-41847"
      },
      "action_statement": "Vulnerability CVE-2026-41847 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.18."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41848 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.14.",
      "vulnerability": {
        "name": "CVE-2026-41848"
      },
      "action_statement": "Vulnerability CVE-2026-41848 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.14."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41849 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.17.",
      "vulnerability": {
        "name": "CVE-2026-41849"
      },
      "action_statement": "Vulnerability CVE-2026-41849 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.17."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41850 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.15.",
      "vulnerability": {
        "name": "CVE-2026-41850"
      },
      "action_statement": "Vulnerability CVE-2026-41850 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.15."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41851 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.13.",
      "vulnerability": {
        "name": "CVE-2026-41851"
      },
      "action_statement": "Vulnerability CVE-2026-41851 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.13."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41852 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.13.",
      "vulnerability": {
        "name": "CVE-2026-41852"
      },
      "action_statement": "Vulnerability CVE-2026-41852 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.13."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41853 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.18.",
      "vulnerability": {
        "name": "CVE-2026-41853"
      },
      "action_statement": "Vulnerability CVE-2026-41853 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.18."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41854 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.20.",
      "vulnerability": {
        "name": "CVE-2026-41854"
      },
      "action_statement": "Vulnerability CVE-2026-41854 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.20."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41855 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.16.",
      "vulnerability": {
        "name": "CVE-2026-41855"
      },
      "action_statement": "Vulnerability CVE-2026-41855 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.16."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T18:45:57.071664+00:00",
      "status_notes": "Vulnerability CVE-2026-47883 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2026-47883"
      },
      "action_statement": "Vulnerability CVE-2026-47883 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-47884 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.21.",
      "vulnerability": {
        "name": "CVE-2026-47884"
      },
      "action_statement": "Vulnerability CVE-2026-47884 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.21."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T18:45:57.071664+00:00",
      "status_notes": "Vulnerability CVE-2026-47885 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2026-47885"
      },
      "action_statement": "Vulnerability CVE-2026-47885 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-47886 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.23.",
      "vulnerability": {
        "name": "CVE-2026-47886"
      },
      "action_statement": "Vulnerability CVE-2026-47886 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.23."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-47887 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.22.",
      "vulnerability": {
        "name": "CVE-2026-47887"
      },
      "action_statement": "Vulnerability CVE-2026-47887 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.22."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-47888 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.21.",
      "vulnerability": {
        "name": "CVE-2026-47888"
      },
      "action_statement": "Vulnerability CVE-2026-47888 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.21."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-28T18:45:57.071664+00:00",
      "status_notes": "Vulnerability CVE-2026-47889 affects version 5.3.39-tuxcare.9 of org.springframework:spring.",
      "vulnerability": {
        "name": "CVE-2026-47889"
      },
      "action_statement": "Vulnerability CVE-2026-47889 affects version 5.3.39-tuxcare.9 of org.springframework:spring."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-10-08T08:14:59.925459+00:00",
      "status_notes": "Vulnerability CVE-2026-47890 does not affect version 5.3.39-tuxcare.9 of org.springframework:spring. Spring Framework 5.3.39-tuxcare.23 is NOT AFFECTED by CVE-2026-47890. The vulnerability is specific to SSE (Server-Sent Events) with view fragments, a feature introduced in Spring Framework 6.2.0-M7 (August 2024). This feature does not exist in the 5.3.x line. Comprehensive searches confirm: no Fragment class, no FragmentRendering interface, no fragment-related SSE handling code exists in 5.3.39. The CVE's stated affected ranges (6.2.0-6.2.19, 7.0.0-7.0.8) correctly exclude 5.3.x versions.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-47890"
      },
      "impact_statement": "Spring Framework 5.3.39-tuxcare.23 is NOT AFFECTED by CVE-2026-47890. The vulnerability is specific to SSE (Server-Sent Events) with view fragments, a feature introduced in Spring Framework 6.2.0-M7 (August 2024). This feature does not exist in the 5.3.x line. Comprehensive searches confirm: no Fragment class, no FragmentRendering interface, no fragment-related SSE handling code exists in 5.3.39. The CVE's stated affected ranges (6.2.0-6.2.19, 7.0.0-7.0.8) correctly exclude 5.3.x versions."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-47891 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.22.",
      "vulnerability": {
        "name": "CVE-2026-47891"
      },
      "action_statement": "Vulnerability CVE-2026-47891 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.22."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-47892 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.21.",
      "vulnerability": {
        "name": "CVE-2026-47892"
      },
      "action_statement": "Vulnerability CVE-2026-47892 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.21."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-47893 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.21.",
      "vulnerability": {
        "name": "CVE-2026-47893"
      },
      "action_statement": "Vulnerability CVE-2026-47893 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.21."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-59280 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.22.",
      "vulnerability": {
        "name": "CVE-2026-59280"
      },
      "action_statement": "Vulnerability CVE-2026-59280 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.22."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-59281 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.22.",
      "vulnerability": {
        "name": "CVE-2026-59281"
      },
      "action_statement": "Vulnerability CVE-2026-59281 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.22."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-59282 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.23.",
      "vulnerability": {
        "name": "CVE-2026-59282"
      },
      "action_statement": "Vulnerability CVE-2026-59282 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.23."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-59283 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.21.",
      "vulnerability": {
        "name": "CVE-2026-59283"
      },
      "action_statement": "Vulnerability CVE-2026-59283 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.21."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-59313 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.21.",
      "vulnerability": {
        "name": "CVE-2026-59313"
      },
      "action_statement": "Vulnerability CVE-2026-59313 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.21."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.9"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-59314 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.23.",
      "vulnerability": {
        "name": "CVE-2026-59314"
      },
      "action_statement": "Vulnerability CVE-2026-59314 affects version 5.3.39-tuxcare.9 of org.springframework:spring, and is fixed in 5.3.39-tuxcare.23."
    }
  ]
}