{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a5894bcd-6eb7-53da-bd88-d85ff59a51cf",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-core",
      "purl": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7",
      "version": "5.3.25-tuxcare.7",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:0b0c7974-828e-5a08-be00-c7eb53fd4dc6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.25-tuxcare.7 of org.springframework:spring-core and will not be fixed. CVE-2016-1000027 is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required",
        "response": [
          "will_not_fix"
        ]
      }
    },
    {
      "id": "CVE-2023-20860",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:d53122b0-58af-5f70-8248-69a7fe9a4be1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:1eaf933e-660f-5607-9896-8690313f0189",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:4cfe53a5-dd71-50a3-a09f-d38ddd81aa73",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:a583f69e-cd0e-5d53-842a-57a6184c9dad",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:8413c8f8-e517-5c89-8467-ec8c2018a17f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:d1251049-c707-51bb-9376-d4c18ce898a7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:5abfddae-94a4-5940-b7c8-89814103faec",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:c211addd-38d0-575f-b0dc-efc123a8e6b1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:de6d9f58-241e-5eda-a06f-6e6935469114",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:cb9a2b50-3fe4-56b7-a0e4-fa0cb9e6e5cd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:8a1daf40-5d7d-5428-a1c0-ad61f6200195",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38828",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:38fbd691-d694-52e7-ae60-924a88c83eaa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:201039ac-c0fe-5e02-a3bd-b399f4e84132",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:45267fb6-a3c1-58e3-b53a-6a10b3567cf6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:b865d541-36ae-5b31-b24f-c762d24a2448",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:7732560f-a632-56e8-a559-ec91178a0c45",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:2c0f2e24-1599-5931-b9f1-7845248821e8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:bf2929db-61d9-5a6c-8970-0bbef3033bc5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:b1c4ae27-f6b5-5bca-8a36-47ba186e5f93",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:5e90379a-3d8c-5165-adc1-41843b6aeaf3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:cbf8ed3f-db91-5e00-bb23-b04174a3831e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:712590ee-45d0-5e96-ad9a-262bd1e55909",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:822b46bc-ff93-5f3f-b91c-2d72913951dd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:1f2a7367-2194-53a9-a58a-e92332666818",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:278d826c-2770-5aab-87fe-0d51f94a9302",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:a545850b-b28b-5f8a-b91b-5f54fb20b086",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:d9eb7da8-5a92-5c57-a719-8a764b99e10c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:956ec7e1-fcec-58c8-9145-50407e682f7d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:e6cfffc7-7ed9-5bdf-a859-754cae945242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:0a586524-f4d4-539b-b0e5-ef78ea670d44",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41847",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:1847add4-d2de-57fb-b544-b6c26f692503",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.25-tuxcare.7 of org.springframework:spring-core. All 1 patch commits already exist in target branch",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:91b1f14c-1442-563f-bfc2-53472ce3647c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.25-tuxcare.7 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.9."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:b56679a8-38a8-5dee-b74c-5bd37fb8f0c5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:98a2218c-5362-5487-b3b2-8af0396496d4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:455d081f-a98d-58f0-9241-73789f80b4e1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:202dec01-c060-500f-a35e-844b9ec96984",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.25-tuxcare.7 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.9."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:d638b358-cf51-5157-b476-f63d1a3363e0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:b222ca1e-3e82-53ff-b2cf-e3862126ce9f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.25-tuxcare.7 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.9."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:56d7dc5e-dbb1-5c9b-926b-433c5e06d72d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:730d11c1-51ef-547a-91b7-a86653373e24",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 5.3.25-tuxcare.7 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.8."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:fb700e7b-d9d6-5617-bd2f-e3cba345afb4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.25-tuxcare.7 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.10."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:17d6e401-ed99-50c9-ae74-b917b222f96d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.25-tuxcare.7 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.9."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:da6b4311-c141-57b7-b256-ba2f19e59516",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 5.3.25-tuxcare.7 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.8."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:534e7990-2154-550d-a44d-2d477dd2de47",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.25-tuxcare.7 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.9."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:36c0317e-76b0-5bab-be04-ce0e16304da8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 5.3.25-tuxcare.7 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.8."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:0e13fd0c-d6d0-5f42-9ccf-056362e16f2c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 5.3.25-tuxcare.7 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.8."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:6fc50950-4ff4-5437-9373-b8c15745c7a4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.25-tuxcare.7 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.9."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:e4b56b5e-1b66-5cb4-8839-eafae56488f8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.25-tuxcare.7 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.9."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:f898917f-9616-5c77-8518-dac6e92c1503",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.25-tuxcare.7 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.9."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:161d36ff-50b9-5dbe-821f-5cb2ac467411",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.25-tuxcare.7 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.8."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:77ec7a80-8a3e-5ae8-8845-79d0cf0535a8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 5.3.25-tuxcare.7 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.8."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:1da391f4-bf1e-59ba-a75f-6136f1293ef6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.25-tuxcare.7 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.10."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.7"
    }
  ]
}