{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5db4c836-8cff-5c3c-8120-ddbc67cccde3",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-jcl",
      "purl": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2",
      "version": "5.3.20-tuxcare.2",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:02aef6c3-74c1-57e9-9708-733e0160922c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jcl and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required",
        "response": [
          "will_not_fix"
        ]
      }
    },
    {
      "id": "CVE-2023-20860",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b146c706-5338-5995-a977-ef97c30ccbe6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ad85a3a8-77e1-5c47-9087-d05204fac6da",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6488aa0c-3bb2-5409-9a3a-4f21edd17e03",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20863 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ab289394-bf64-57fc-80a4-6894b0484b4e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2ce93a32-afe3-5f5d-94ce-aafc2485c8de",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3bc7fc33-d09c-57b2-a190-6363f3aeb78d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dd86569d-60e4-5816-a60b-91b7c6541053",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:56454bf2-19b5-52ee-9d22-88d56377e7fe",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f972fd3a-b1da-5f36-9d9c-c69c4aa35743",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4dd684ba-18d4-56a2-80f5-d3b97a127e8f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5b5d4da5-ab45-5e11-8bb2-10d9f2fee6db",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2024-38828",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:10248a4c-cede-5d51-9461-af3da5ef28d5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3f658d7b-9bb6-5b08-bfef-5ec82be914ba",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7ac19ee5-2f8c-520e-9a6b-c187053a4bf0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0c55957e-2427-513d-9a94-4f159c3c4c4a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9e0d1706-4a85-59c3-bbde-51cd81ca9941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ed07178d-07eb-599a-8fa0-ef53edbb6b57",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9fcb21ed-5495-5933-9f0f-43ec8d7af692",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2f04b875-9baf-5d25-8713-a289c2b540ef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:691a4c5e-5e59-527e-b30e-3a4f85a412a9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2a8b22ad-bb11-52b2-9764-e9b5a1b05e91",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:05b6c57b-be18-5ffe-9e01-37976bfdd27f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fb009ead-5c7b-51a9-8f3a-1e05afacf0b0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9b21bb91-714a-5f6f-b3ca-71f21d8d0b62",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7bce9e7b-0fa9-56c0-b221-b70237e8c28e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a4ec71cb-dc0a-5db4-a7b3-fd0bff0b03b4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fc5125ea-edad-5c9e-8d06-7c706be98738",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:cec18e4c-f14f-5d02-b102-d1a5ba441058",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a00ecf37-ba30-5a67-b81d-9ff3231a97e1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3c09d782-2981-5e68-a565-c4864b41ee16",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-41847",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5ac5ebee-9271-582a-8c39-4ec1bd795ca8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41847 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7a0fb7a4-46a4-5f33-a08b-e47c5803de48",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bbd622b0-83dd-5f72-9414-d82a6b67dc52",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4dbee486-28a2-56d8-b9ee-a9f5a6dbc033",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:524884b5-4fc6-5c84-85e8-d986a30937b8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9a7b69c9-0f2a-5320-9c2b-9a65a0d6be71",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:61bcb8f7-785b-5a3a-af02-29ca8f1a96ee",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2368ef39-6996-58a9-a741-a21e38ddbc2e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:519c7892-9bd8-59c4-b439-a250d511fe33",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1e7b8af5-e883-5230-946e-415c8728a453",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:564eb60b-a7a9-5e6a-bf5b-111c7d268ff0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:85d4c8a6-03d6-5c58-9e62-d5739c795f41",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:efd18d33-4fa0-5132-b895-5a8cb7ab300c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d6be282e-2324-50fa-8d15-b45a75c019a1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:86e3edea-adf4-5ca6-935e-7d9b232c3826",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fe9b9ae2-77e5-5729-bc8a-f469c6bc7a2b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a26e1309-9154-50de-b228-85b1ac12de37",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6dafd0bb-b8f1-5585-8e51-7254efed4a46",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:84e06ee8-68ef-5fd6-a7a8-08c19d9e5502",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bd41db14-af86-5ca4-92c7-3befc6ea8f1e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:23eca088-fc6e-5526-9813-05cb4f67be6d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:79d55c57-d661-507f-887b-82d4704d194f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jcl."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-jcl@5.3.20-tuxcare.2"
    }
  ]
}