{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9ca2e92d-1bdb-53cb-902f-fb2688183906",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-core",
      "purl": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8",
      "version": "5.3.25-tuxcare.8",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:d9282524-b99a-51c4-bf11-2c2fe0578a61",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.25-tuxcare.8 of org.springframework:spring-core and will not be fixed. CVE-2016-1000027 is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required",
        "response": [
          "will_not_fix"
        ]
      }
    },
    {
      "id": "CVE-2023-20860",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:b9640350-2597-5019-84c1-e413521960b1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:2a00843f-eb5b-5bf6-bbc8-47defdf89f4b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:41e0ea83-8be2-5bc8-9420-bdc802a4a4d7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:78de902d-be5f-5d30-b5a4-dd565756031b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:77e5e948-a3cf-5016-bde8-11910313be8e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:bff84d8c-e993-5e50-ac7b-100175fbc4ba",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:8102b663-fbe2-55f9-b858-21623d3dc755",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:1ba13568-2a75-5531-b921-2a1a0638ee9a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:2287c214-2535-5bd6-8067-561c65b7a9cd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:6648eee9-59a0-5821-b042-38cedd9204d5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:c483dc35-36e7-59ed-bed5-5262f8ce38bc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38828",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:8980fa9a-4ca4-5494-994a-9c0fa9713f80",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:46fee743-210e-58e1-af86-373ecff0ee88",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:872e3ecc-ac5f-587e-9a7a-917a680d8019",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:900a02d4-a971-5308-9238-cbb526e4f8d0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:eaef2c74-cdac-5a83-8184-a1e92c08120b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:34b40453-9d46-5969-a242-2b2d3ff77ec5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:70a7248a-1fa3-5fc7-a7dc-8391d3b8b98b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:4f8be2be-bfbf-5eb0-bcf2-2e4733291df5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:c0d57c13-c8db-5e84-b650-4fa8a0fe93c2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:0aa7a3be-35d3-5337-a0e1-af4bed09ce7f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:5fd8a62c-9766-5094-ad69-9f14c4d797a3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:aa9e21d0-2450-561b-b687-6aa3c77c303d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:7b77b835-f241-54d2-b5ff-8a5c4cb55952",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:5ebe502e-0b64-5198-bf49-a3b5d4c5a059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:0d1dd445-5ffc-5e1f-855c-677e613fb147",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:b6856b35-caab-5fde-9717-392a233211c3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:18600a89-d357-5604-83c4-38f5711fbffa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:7aee8d82-6c6a-5fd1-84ab-f5ff31172f5c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:ba12d682-11c9-58b4-b3e4-49b6848a2392",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41847",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:9dfc5469-6819-58c9-b80e-e16587773ec0",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.25-tuxcare.8 of org.springframework:spring-core. All 1 patch commits already exist in target branch",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:120fff89-f2d8-5784-9e13-44ff21b248a5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.25-tuxcare.8 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.9."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:e00de1a6-d88e-5c88-b0f4-d14d485b0cad",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:d04f34b3-4095-5583-ac1f-f196f9372d1b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:2f80ef9d-28f2-5604-9622-c0353c738a60",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:6ab5b235-f762-59be-8c19-0a0ba776c813",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.25-tuxcare.8 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.9."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:0a21811e-39eb-5d7a-b4e4-ae5f9a7616d2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:35519b59-b30a-5607-b494-70373bff24ed",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.25-tuxcare.8 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.9."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:474a4e84-4221-5d6f-9850-6351dd1cc808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:eb06ac3b-54a9-5a7e-87ea-47895eafe518",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:38e43195-9e40-57fa-b2f5-72d2bcbff0bb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.25-tuxcare.8 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.10."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:edd83e15-0f39-5bec-a9e2-61006d6a6657",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.25-tuxcare.8 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.9."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:a265b0af-10f6-56ad-8ed9-c074beb06af2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:07086fa2-8b82-5e37-b991-a79239bc9d6c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.25-tuxcare.8 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.9."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:65e0de0c-486b-5e67-b804-3275ee362e6a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:e46868de-668d-51c5-ad6a-0f7132398875",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:da2c1c54-4b28-5243-8ae8-663d34487c33",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.25-tuxcare.8 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.9."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:0b3a58f0-8df5-573b-85d6-e0d165f5a899",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.25-tuxcare.8 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.9."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:234fea96-f030-5587-a5b5-38d64983635a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.25-tuxcare.8 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.9."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:6acaf34d-8f8c-5ac4-a2a3-dfe95bdb5db2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:f4c913a3-7f52-56c0-8e64-c0b06f0b0226",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:ac03cf88-9648-57af-9c43-5a36215ff7d6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.25-tuxcare.8 of org.springframework:spring-core, and is fixed in 5.3.25-tuxcare.10."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-core@5.3.25-tuxcare.8"
    }
  ]
}