{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ac9a67db-a887-5d7e-8aa6-862903e9e5fc",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-tx",
      "purl": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2",
      "version": "5.3.20-tuxcare.2",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:66233a71-a074-5fad-8965-76ba83af404d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.20-tuxcare.2 of org.springframework:spring-tx and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required",
        "response": [
          "will_not_fix"
        ]
      }
    },
    {
      "id": "CVE-2023-20860",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:47345425-78d9-5931-adbd-d2e04e7e44fa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e983fe1e-7084-5cfd-b9a5-de73626ccf79",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:55e2dad4-fb2d-572e-a35d-57e38e1d678b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20863 affects version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:aeb06a23-f773-53fd-baa1-bc732a118996",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9edaa719-82cd-5911-b234-bf976fc6d7b4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:969ec76c-c05d-5699-b889-81c70da97001",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fc1d0aa3-1ba6-5d65-921e-537693ec0a67",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:371043a9-d3e2-53e3-9d96-da8c0e3a4664",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2230495b-a048-538d-80fd-fb90bbbe0875",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:09112976-8f11-59d6-a6d5-2342e3b8eb1e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a76ec8c6-129e-57a4-8e29-36f654170307",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2024-38828",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d527790b-6a0c-5f67-8a50-b107ad063569",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:52fb504d-4111-54e0-862e-a02a057f002d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9b2dabc5-3f36-5b6f-9814-eb92399e9be9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:95059c10-a722-5762-bd42-73e35594ec3d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:371b7c9a-1752-5b1d-8ccb-41946975bc8c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:19e2c39c-715e-5579-9c7a-9bfb49471ad0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c0d16c9d-e6d0-569b-9ec7-6d0aeb2b821b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1f4b53ec-37ee-543d-adb0-85b0f8b1cff4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8536ca21-804f-5a65-8986-1583a9da995b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e62b3693-1a26-5bdd-82f3-890fe0a6b0e6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fbe3bf4d-fc86-54af-864e-86d771743a0d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fdcfaf36-1a6a-5dd0-95ef-8ad6773f2964",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4628ed4f-e892-5c01-850f-0daa68ac4abf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:17eb66c1-7b6f-5886-8a1d-d2c730275f69",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:92d21dfc-d8f8-5814-8d8a-53e63b5cc778",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:088891c3-9459-51d0-b867-5a889e6737ef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dec531e5-990f-594c-bdbb-2da859544c5a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:65cda027-384d-557e-9990-d2e47d32d7de",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3262c4ab-6474-5162-a337-28761cefaf4c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41847",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:af77a676-8b9d-5b4b-9e62-e3ad10855c08",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41847 affects version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:904739ab-f841-539c-b0d8-671e0aec6fb4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b245cec5-624d-57ad-9c05-5fc568b089dc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:589f3514-6afb-50a0-93a8-c8d556244eb5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3e2212fa-f28c-594d-aa56-e4f855c71815",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b6b2b7d5-b41f-5f0d-9916-5f70400b35d9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:016bfb0e-cf0c-5585-822b-6e664f164b1a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:955ddd14-8817-5fe8-924a-3e65b3420947",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a8f4fa78-1752-5f48-b8ee-e33aedc7d50a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:68bcd0c4-f044-5280-8ed5-435503f47533",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ad607866-d17f-54ce-b669-a85625f15161",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:46739e3a-7aa8-55ea-8e59-b75bfabc24df",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b00085ba-699a-5cc5-a543-59488d3a3f57",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8e04f777-6bd4-5551-9d05-e37964bb8662",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f4130bf1-df7e-500e-8cf2-f2ed6462e7cc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:db43e075-ff03-51f3-adef-2153b84db68a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:919724b4-9bda-57fc-a5a8-8056d4b45c7c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:35bf15f8-fe2a-56d2-845a-dc4959b3cfe2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:20e62e99-2114-53c7-bc3d-971e969953ee",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5bda5ae6-3e06-5f13-94b9-0b9d6c5bda7e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d7e65bba-ea3c-51ae-9214-c04fa906484d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7f5dbf4f-ebe5-546e-b4b1-baebdf510693",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-tx."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-tx@5.3.20-tuxcare.2"
    }
  ]
}