{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b8cbef65-6679-5870-aa45-6d9ac8a29fd0",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-core",
      "purl": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1",
      "version": "5.3.20-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c107a42d-3ddd-5b89-a6ee-baf88f7f33c2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.20-tuxcare.1 of org.springframework:spring-core and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required",
        "response": [
          "will_not_fix"
        ]
      }
    },
    {
      "id": "CVE-2023-20860",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:63ea8683-ce41-5206-9dd3-77f47a580d52",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2f10853c-9d01-5267-8358-7e32d972312c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c586b854-72b8-570f-8b74-71f8c99b1c8b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20863 affects version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5f3258e8-81f4-5171-b03a-e9de4bbeae01",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bc06a2a6-0258-55f2-84f2-c155782186a2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:83c1c374-807e-550e-859d-43c72f96e144",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:205325ae-ba98-50f5-928d-ce171aaa0b15",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:410bbf29-76cd-5dd3-8b4d-5db153a8509b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e1ebfdb6-44d2-5d02-bdc8-9b9c7fce7e1b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:59403bfa-e57e-5926-8613-46f2bbd5af18",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2e2d5d50-eca4-5ca4-bcab-11cf2d24ada2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38828",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8b1f60ef-28d7-5ee6-b6a1-4c0453cd35d0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a9c915f2-acc7-553e-850b-4ed3f36e6a4b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:30109684-7a75-596f-aea6-f61077d3dd80",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:70b3b37a-9de0-5de7-8bfc-98dfeee8504a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a2b4b723-5a41-5f1b-8acb-678cb907220b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4159863f-0cdc-5720-aa97-48fd045f1305",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4df708be-073d-55f7-bdee-96e267d68d23",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8d9b5e46-e712-5f08-8b80-01597c1b51d9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c5b6b12b-5428-53e3-8cca-2997173abbed",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c88acdf8-1b44-52f4-9728-bf74b5b2b401",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5e4687cd-2133-5179-af02-9fea39c58495",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1f1b6252-d450-5a31-b8b9-a26e4d3f8458",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f3d9801c-c627-53fb-810a-d57971c9b53c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:46e65c77-27bc-5c78-bd79-6fbcdf0c22ff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0f3bcf42-36d0-51ca-bd6d-bc936efab258",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 5.3.20-tuxcare.1 of org.springframework:spring-core, and is fixed in 5.3.20-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a5cde661-9e92-572c-925c-c4b18ee0d455",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4010a71f-69e6-5c98-a6c6-83ac1034a552",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e7eee647-ce7b-552c-b835-3eab42e17ac7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e6877e05-9241-5514-a0a3-7316d3ddc712",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41847",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d953f717-272e-5f1e-bddc-1fd3292260ed",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41847 affects version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:58cd7d66-966e-5a3b-90ff-f5becb7b4782",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:098e3006-68db-5188-8626-ed58a7362c95",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3c3480da-7377-5cfc-bf2c-8e08c50fa157",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:30eb7cbb-f654-52fc-b2c2-cbf3d4b8b761",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1cbb673a-ccb3-5d0e-83cd-b9838e9ea6eb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cfeb8a27-c05a-5fa6-9a5b-501e86ba6406",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ebb1dcee-0559-533f-b9ea-9b2355a48159",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0b6d80d8-e9f4-570b-b6ce-a4382c32333a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b8cf24eb-dbe5-5cdb-a513-cc3c71713d66",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f55b621e-9e15-5c28-88a9-cbaa3978bb53",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1e9d6af8-3a2d-560d-846c-5b8a99778feb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:17c07a81-7e92-55c2-8b39-bed51e2c22b4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:614f179a-d958-5b5a-b5ab-b10beeac430f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dbb13ed3-9c98-55ed-84aa-e25af0055627",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d132400c-5a6d-546f-bc5d-a2bfbeaedd2b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:322b2eee-b779-5bc9-a87a-3a51fe3b26b9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fcf83f9c-3293-5991-b5ec-e221b4416d0e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fd6b0543-d87a-5985-80dd-dc9caf764856",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a295fce4-bf6e-56a3-b4bb-28668d0f3642",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:453bf2b4-40ca-5cc1-a09d-bcf5097ef61a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c9378d6f-8c48-53f7-8b16-3f9b45df1746",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-core@5.3.20-tuxcare.1"
    }
  ]
}