{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:752d1cab-cc79-5317-b517-db4ca8e7a814",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-r2dbc",
      "purl": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2",
      "version": "5.3.20-tuxcare.2",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:34bacb6a-d2af-5b83-801b-8977fc50b043",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required",
        "response": [
          "will_not_fix"
        ]
      }
    },
    {
      "id": "CVE-2023-20860",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:caae3320-0cfb-50b0-bfe9-2043ebfc25bf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ce10f3fc-76cc-5e7b-8c97-5acf672916e8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5e00751b-bf48-5db0-a73c-ef5f66de2c9a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20863 affects version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1c8d3279-9aff-5d7c-b91f-ce7d64a060a8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1003d3da-f47b-52fc-b7ae-78f829646c37",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c622ed24-e526-582f-b904-164b70fecd36",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9b9f9b6f-189b-56c8-8b67-84a2b7554b46",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ec05336e-fe3e-57f9-8b37-1bc94052020b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:80d0803d-d1c1-59e5-8ae2-4e073d040c7b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:760edb39-aef8-5f14-963a-be74119f4eb4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:766f9515-835f-5dcc-88de-cfca4e00a9d9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2024-38828",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:962ac797-707e-5b4e-8bd9-cea410edfdf0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5758f0d2-6987-58ce-98cb-337ad5ef5fa6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:355e24d9-c2a7-588c-8bc4-5c0c4afd6c96",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:888323d1-4098-5571-9663-66c01daa5e41",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:06782a68-33e5-5e49-9d4d-adbc87a6b624",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fcacfcf4-28d0-5be8-b333-1a0620880e30",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d65a2963-2167-5269-bb5e-ce88922f65b8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:11970517-8088-50d9-9eb6-067479d2992a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b04dda08-8511-5577-a58c-db4bc053608b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:035a487e-4046-5860-be9c-7207a6c2abee",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:612172dc-243b-5f20-92fe-35d68b07d40f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f34c720f-f99c-5b6d-a430-9e42b16e9d01",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a115ccd2-f40a-5344-a008-54e5c1ab20a6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5f996d06-ce31-5b40-98f6-d583147b7987",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2ce8671f-e1ea-5610-9245-d0de4c67efbc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0847c6f4-2f24-527d-ad9b-9f9bd4889ef2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ae572380-dc6e-5781-95a3-6826cd942af0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:68022f0c-aacb-5ea6-a9bf-5ea5b17ba015",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:de740a95-0a82-5a24-a1da-cfd90da7beef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41847",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:19508781-a85d-587f-8ee5-1281ff7eabae",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41847 affects version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:16063d25-a990-5902-a062-4cf39b9c9462",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3bf05eaa-6a53-55cd-8309-6c7910b39359",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4621395d-b699-510b-8b13-9d95781091a5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:24b8a659-e7b8-5f7e-b97a-7461a1cda1ce",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f475fd4b-253d-553f-9254-53088b9878bc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4e0a8a7f-b431-5cf0-8f61-d01e61c331aa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e06451d4-ad56-5400-967a-dc954b410a4d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ca2a09fc-cf7b-5804-82dc-4f9cc8b333f2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d925bd91-fd24-5bac-8d15-3716edb68124",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7b350694-ebde-5484-a182-cff820a13b74",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:93239f7e-f37c-59fd-927b-a12e56cf7d5e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d62a8820-da56-5de9-b970-ee32b2de91f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8179b0f3-46c0-57bb-9b20-d2a7da9c241a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:82540eb0-d33e-53f9-a2b2-4325e806dca6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d5db16e9-e886-5812-8118-b3f32f6fd602",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ba228377-0a28-5240-858e-23632d770f25",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1a97f329-2da2-586f-a537-16ba4bc1fb94",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:11575beb-7fcc-504c-af12-e47668bdcb2d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8f541fdf-c0aa-5f94-b859-7d370ef887c7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4f870398-7ed8-5143-8270-783cf183760b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f5e66d31-4104-5963-8ec4-0331a3f15cfb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-r2dbc."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.20-tuxcare.2"
    }
  ]
}