{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b37faf91-ae49-53a3-bd74-c0fd47e3336d",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-core",
      "purl": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9",
      "version": "5.3.29-tuxcare.9",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:426538fc-a489-50d5-a768-f4877bbc2d34",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.29-tuxcare.9 of org.springframework:spring-core and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required",
        "response": [
          "will_not_fix"
        ]
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:282f5c62-23ab-5b02-87e5-ae963dfc4bff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:68ab948a-ac7c-5c1b-9b6e-e8e21cae656e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:4fc6b422-bb52-502a-86ec-87bd90638c78",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:bc9313f4-fe6e-5df0-9165-19fe36d4cb7d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:f527bf1e-e3bd-55e6-b40a-b01ac85c26f4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:00092533-843f-576a-ba57-db0827622a4d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:c5c51076-f435-5fbf-8876-14d8c6b32ae3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:bcd7c947-bbb4-5aac-8488-b23e3eff5a37",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38828",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:0a99471d-cc20-59f5-91f5-83e103891d3d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:e30e3248-c844-515b-a9b2-539678aabf67",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:d56aa42f-944a-5729-a4e5-352d05a34c59",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-core 5.3.29-tuxcare.9."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:01e1035a-f03e-5c5d-8e16-ee7e7de98569",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:e5766058-a6a8-5dcb-b559-971c8a50b1a2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:2a4a6a88-ad6d-535d-84ee-82155980f479",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:ab536b44-1a40-5903-8ad7-4cb32bafcdd3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:0a72a0e6-0808-5615-8e23-87a372f778d3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:5e2e5a88-b9e8-5e57-8113-4876f84c1131",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:a141b8a2-0b21-50a5-bd9d-b8602f5c3fa1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:3543909c-9b02-5f7c-b850-dd097bdaa89a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:7f152e87-e1e2-5bbf-8080-49b6942a8585",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:9f75044d-89d9-5b4d-918a-1e4a79ea2cb2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:c51f1533-be1c-5eb0-9f66-7849c588d393",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.29-tuxcare.9 of org.springframework:spring-core. already_fixed \u2014 The target repository (Spring Framework 5.3.29-tuxcare.4) already contains the complete fix for CVE-2026-41840. The fix was applied on 2026-05-19 as part of a TuxCare backport for CVE-2026-22740 (commit bc0026ae70c), which addresses the same multipart request DoS vulnerability with identical code changes.",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:4e6a9681-5336-5550-865f-2975cebef340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:3956e087-a278-5547-a551-7b9d7e017f88",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:86c85ee4-b66a-5ca4-8fdd-f93b5f398df4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:e222ec24-70f6-5c90-90e6-a6a5accf5eec",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:fc38f2c1-dc1c-5393-97fd-1cf75e823356",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:fd39c5d0-871d-526d-95cb-1e2c8676a724",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41847",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:ba11238d-3cb4-5d10-a7ee-94271790cce1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:bc8cf6b8-a033-51e7-8e50-57cee40e3c9f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:48e63969-88a7-57aa-a597-b4f50add1059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:fe9ac62c-332a-5562-89d0-d549d876ec3f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:f03d8a64-48bf-5037-91bd-1a188974046e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.29-tuxcare.9 of org.springframework:spring-core, and is fixed in 5.3.29-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:c0aee748-0081-5c19-a223-d352e8e7c453",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:66fd6c6f-d73f-52cd-8f29-6b7f7be7d4e5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:b5070e65-6eb7-5b77-b807-b8abc65b8a6f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.29-tuxcare.9 of org.springframework:spring-core, and is fixed in 5.3.29-tuxcare.10."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:62c97430-c0d5-5d0f-9e18-da857c65c5d8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:db2c06f7-2c1a-510a-b2ef-27242c5831db",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:a149c692-b9f5-5a17-803e-adcdaf750d4b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.29-tuxcare.9 of org.springframework:spring-core, and is fixed in 5.3.29-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:c6c8c3bb-5f54-5c51-8878-1cddd09ddcea",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.29-tuxcare.9 of org.springframework:spring-core, and is fixed in 5.3.29-tuxcare.10."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:80c01e6a-bb62-558d-b345-82e9bb4d31f9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:559f7062-db8e-597a-88db-5ccf2ff53b89",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.29-tuxcare.9 of org.springframework:spring-core, and is fixed in 5.3.29-tuxcare.10."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:b75fbe15-eb66-563f-8114-72f66a1ce1db",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:f4b7c036-8d68-52e5-95cd-222de5d9b00c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:c4ff058d-6bfe-55f0-ab11-e1cdd61ddad9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.29-tuxcare.9 of org.springframework:spring-core, and is fixed in 5.3.29-tuxcare.10."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:47948d24-b0d0-544a-ad5c-18fc3536f413",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.29-tuxcare.9 of org.springframework:spring-core, and is fixed in 5.3.29-tuxcare.10."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:2bf1d9c1-fb19-561e-a667-a3bd36c11964",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.29-tuxcare.9 of org.springframework:spring-core, and is fixed in 5.3.29-tuxcare.10."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:531f22eb-cc0e-52b7-ba3c-3249e7704e13",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:e559423e-8d21-580c-9b6c-63097aa6ee3d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:af57e88a-d312-57f3-8584-947ec741a27e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.29-tuxcare.9 of org.springframework:spring-core, and is fixed in 5.3.29-tuxcare.10."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.9"
    }
  ]
}