{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d5d3a985-132d-5ed9-9bf1-0ee7c2ce2cb8",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-instrument",
      "purl": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2",
      "version": "5.3.20-tuxcare.2",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:edf1fde2-1b7d-5840-a3ac-a5baa48ad176",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.20-tuxcare.2 of org.springframework:spring-instrument and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required",
        "response": [
          "will_not_fix"
        ]
      }
    },
    {
      "id": "CVE-2023-20860",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:10e10b2a-94ef-5e6e-b444-dcd03015cf0d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fb9ec79c-c78f-569b-aa95-8bb308f7f9f5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c56c9a7c-1272-579d-bf28-d1d456a1a820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20863 affects version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0a798e1d-c312-51c1-aed1-350c62ec5981",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:36a6c188-bac9-5efa-aec5-f8398673ee33",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3a52d5ff-849b-5cb8-8674-cbec2092b8a1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c4b19e6b-285d-5913-bd2f-eca572a76688",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c044572c-1852-562b-b003-04fd07611e31",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:cde31613-718d-5a6b-b56c-2312340d1814",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d5716daf-1088-503a-acd0-245eb750f7b1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:84bc7e7e-0efb-5bce-9c3c-b41cbfb04137",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2024-38828",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:232b2d57-5528-587b-87d7-5d295715cb4d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9f7a6c11-505c-5835-ac8c-a7492dc0c18d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7924d4b1-2824-5ece-b705-2957a36dac00",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:79bf72eb-8e77-5f4c-8f68-66f6be56f8d7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ebc4072f-5033-5393-8f6a-24e0551fe9dc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2b51fa53-4a48-54d4-921f-dda348ee6dcc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7511b1e4-a611-553d-9344-164ef451f14f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c2e45c11-0754-556e-8fff-066d7df620a5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a5a162f1-cb8b-50e7-9821-84fb230d833c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b7e4f678-51a1-5edd-b354-3c3bb2232c02",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0334af0c-37cf-51a8-af25-509cf6fe3d31",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2d5ee01f-a332-5308-a5c4-b4fda65c1f7b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e69ea640-63bb-5202-b8ce-bac899e07ae1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a76d5824-06af-5328-8cab-56f8c05ef23f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1b22f172-0c01-5d30-a6c3-7f3b2234ff93",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dc0c85fc-9d4f-5545-88f3-bd7a574d1bb9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:adba4e6b-cf45-5a84-b8f5-b8a87def116e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5ee355e7-e9cd-59c1-9b1d-c42e0efb1ee8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:afede635-c2a4-5b7d-b61c-07a003eaaf79",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41847",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:41ceeed0-cb50-5a11-ad4c-c4f2c4f4a859",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41847 affects version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d45f9f70-eb01-5485-a9d3-e8c4e75dc0ee",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:49e0a24d-08e7-5bf9-b180-b5e2f82e3304",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d48149b8-e007-5162-8dcc-fe67e90601eb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ec174d39-95e0-5316-aa80-26911f288591",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:08bfba7e-01fe-56c4-8cc3-b73620810f27",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5990548d-d47f-55c3-9047-b8a83e5b0188",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7a6b0be6-8b86-521a-82bd-95907b05ac85",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0e4247fb-4cf4-580b-911b-85fca89c21fb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:29ac093d-d0dd-5813-a02e-d18dec855b56",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:024446ba-7c7a-509a-873a-a1fb416a2162",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:055928c1-570b-5914-b306-119a8cd39b15",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ade1a37e-1612-5f53-8c8e-3d9a16f39571",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dd8caf8c-76cf-52be-b14b-07a87c731604",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fadd5dcc-725a-512d-9499-b3b29d244a8b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:62ee6670-b10a-5c60-bb19-6ff037cf5c64",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5c0161d5-2072-5c85-a15a-35caf86673cb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0c4e3953-2bde-5a85-af80-a38769d3864e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:db846ad8-d1a8-56ea-836a-653c34aa777b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a1fa698b-8fe1-59c8-9b49-d956f74c0107",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:62b26486-94ee-5dc7-a314-ed40b37f52cc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:294f23bb-d67b-5a8d-937b-823da23df67d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-instrument."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-instrument@5.3.20-tuxcare.2"
    }
  ]
}