{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f62937c4-51c4-5fe8-8131-cb8fa7ce7187", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1", "version": "5.3.19-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:766fa192-1906-5351-8cd2-9cd228721aed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.19-tuxcare.1 of org.springframework:spring-core and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:6fdf98e7-d7a4-534d-82ab-b5114f2282a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:9b3b7626-2f6c-5ac1-9709-02440164162c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2023-20860", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:6a35f29e-6126-5efa-a3f4-0cd69c479a37", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20860 affects version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:5dd0b05a-695f-532f-935e-859e502b0bb0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:65cd0997-8595-5b42-bc6d-ab5f5fc2e207", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:0e2a01dd-a155-5b00-9cc2-eb7c53ede1f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:e6cc2681-1d92-5f4f-847a-4da622f8a35c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:edc71f53-0c35-535f-81c9-4a31c5d08144", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:e8e3b1e1-981d-5ef2-9bd3-8a4dda1d037c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:c2b7563d-b332-5283-91a4-651cbc1792e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:ab535aa6-76b6-5d24-aaa3-e325fe8aff41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:f35c105a-8fc4-5d7a-9d4d-be963c2a9cbc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:dc0f88ce-193b-5270-a812-e525d4eb0d1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:d392dd3d-4680-5e4e-a450-487fb63923b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:baf66fd7-fb5a-5ecd-a41d-409533826943", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:2f404fd1-b4ed-592d-97f8-2f1d8fe20650", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:a60acf5e-b204-5804-9736-240fb716c836", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:340088ca-20a6-536f-92a0-2de30cc31afc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:fbd1c7ae-860d-5bad-bd97-9d577d53ac12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:367df3d4-2ada-5e00-a7a7-8dc9886fbc34", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:b5e03270-cad9-57ee-8874-f627ab4d5fe5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:0c170ee0-abaa-5d3f-b3c8-418d031c37a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:cdda10e7-cc47-5740-83ce-4e93fdcd1c91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:392e4393-e5ed-55c6-8ce2-64dd8883177e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:0bc28af6-02ec-53c1-803f-ec51f0ee1249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:65c0bd55-31f6-5901-9fce-4f667e8fd42c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:5c6d9430-3f14-5f30-aa12-7f1ad744f557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:f46f1c6b-024e-57a9-87f8-61af0fa0f86a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:ef49571e-5e7a-5591-a28f-2022b3399cca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:a295ecd4-eec0-5a89-ba19-845aa1f1d216", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:90f67c4f-ce87-57a2-aa0b-b1271c11cc90", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:43d4f734-70d6-58d3-94b0-1367b56b3a09", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:16a3e065-399a-5e4e-9f85-034c5cf1950b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.19-tuxcare.1 of org.springframework:spring-core. not_affected \u2014 Spring Framework 5.3.19 is not affected by CVE-2026-41847. The vulnerability (filter parameter shadowing in Kotlin Router DSL) was fixed upstream in April 2021 by contributor shindong.lee@riiid.co (commit 07ba95739b). This fix was included in Spring 5.3.19 when it was released in April 2022, over a year after the fix. TuxCare onboarded the already-fixed upstream version in September 2026. Both ...", "justification": "code_not_present" } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:894cdf62-7836-5397-ace0-68f3a9d9cc13", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:546965b7-23ec-53bf-b5e4-54f560f1f3e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:f150aa13-0204-5443-a253-e5e6c9ccf946", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:7510cf2f-a282-53a3-aeba-ac255f4a6c00", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:21b197f1-fa2e-5c68-a337-3a7a5c4c16c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:a5f1d4b3-6425-572c-b531-fdfd426b84ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:152c1ea7-3fb2-530c-bad0-3b38857655a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:e6f1ce5d-9645-5e1e-ab3f-d89fdfc7cb29", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:8c0e9242-4a7d-5e8c-8cf3-5ee11904929a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:cf57584e-23ae-52b2-a15b-27b63120b7e8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:7d37fafa-9319-58b3-be68-9071ac30c209", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:f9e5b27e-8a06-5c24-b76d-f32e8ab8bb7f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:1cf8eaa0-c13f-5785-91fc-5e50dbefb435", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:2eeaa94d-c4cb-5f6d-86d4-4ea5dff0060c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:58624387-a85d-59b7-9afd-9bba15c42a73", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:b6676b62-5824-5493-aad8-f22c42ad6de9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:22916a1a-a5d2-564d-9051-ae155f5a7b58", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:f88605af-5dfa-5d5d-8bfd-6e8a76a9ac02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:41fcc28f-583e-513d-85b6-e912c0d352f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:e54290ae-413c-5018-93d9-bf7d046c8873", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:a61c2db9-b2de-5990-9671-5642724151a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.19-tuxcare.1" } ] }