{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:8a982d39-e0df-5249-a48f-b67b8723a4c2",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-tx",
      "purl": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2",
      "version": "5.3.33-tuxcare.2",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:57251df5-9aa8-56e9-8a0a-ae0f6c7f746f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.33-tuxcare.2 of org.springframework:spring-tx and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required",
        "response": [
          "will_not_fix"
        ]
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b20ce310-f468-536b-af89-57d76d768722",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5ca93e51-1017-522d-a989-14aa9b53a68c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38808 affects version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ccf63ed8-ed88-517c-9ebd-7962a861459c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38809 affects version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dfe5754f-e88d-5b62-aced-ff7fab385ad1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:085ae2d9-70d4-528b-8d87-c84d2d97343b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c6f81688-05af-5d18-b6d4-f9d8bc35e420",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2024-38828",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d49a264a-46f7-54e0-a1a7-8e541e77bd82",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38828 affects version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:80ed3963-bbf5-5e6d-9da8-a236b04471ef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:03579315-c476-5345-9b25-1a8f37728ee0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:29167694-8502-583c-a5c2-f0a446282c99",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b98849bb-ccaf-548d-bc58-4b027484594d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b2b8e67b-d2cb-53c5-9dbe-61789c1042da",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dffda238-1a98-58a2-87ea-b7785dc5af32",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:07f98a70-d7a1-5676-801d-f9c18a448685",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ee690435-252b-5475-bcdb-8af650e2521c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:223defcf-6c8b-5cd7-aee3-0664134c48ea",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:550f919b-2789-5e7b-9254-b20c070b5f6d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:02cb7b38-6c22-5a44-aae6-33a8e6f4727d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1b160fa0-1202-511f-8f54-432a2b091c5d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1c7ad011-4b51-5104-a995-5af1eb3a3d4b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d4d4b485-0217-5042-ba2f-41b0e69fcb6a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0e25fec1-8569-5866-9dd0-0fa4dfddd7f0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3d73ae23-40d7-5529-8b21-39323b66cecf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ab76d8c6-8e8f-52f6-bea5-d2a157ca2336",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e96a0c13-da15-54cc-ad55-e1d20976c4ca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41847",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e55fcb32-ebd7-5dbe-adab-cbcbaeeb4443",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0f90a877-c641-5bd5-818b-b6a84b921897",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:754375bd-9ff2-5c68-bf6e-fb0f34fe6806",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8542b678-be8f-56dd-9924-2764f160d235",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:50a3c4b4-d13a-5f9e-9c38-bd43a16c8aba",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:db22413e-0ca0-5b7d-a70d-b980f2390fea",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8d6d1830-9155-555c-95b5-8989e42df4e3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:96091a03-8161-598f-ba0b-56512c1f8214",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1f189bdc-5b76-57c2-bb1d-b5fd423fce78",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:72484b10-2f47-55fb-8dc0-7f719b90d6c6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:eace5af5-a7a6-5067-86e1-ba2a15d575a7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:27c8afc9-17e5-5d18-b073-648e01046373",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:70dc35ba-fcb6-570c-b5b0-6181856df353",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1b9b9651-e1c6-5ae6-85d1-17a3d261bfaf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b01d0ddf-2c85-53dc-9b41-8fd9f40f8991",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:857da88c-a8d6-544d-866a-1a38678db9c5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:033901ca-0058-5462-8238-dff106c8b4c6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f35f0344-b618-5162-afba-8709126a0047",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:af66898c-1632-5132-8a99-d7ca6b39e7d8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1e58ece2-368c-584e-92ce-f036cdf97b09",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:28c9959d-5c20-5bdc-bfa4-652d6d68418e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d233ad8d-400b-5bd9-9bf9-a15e566e7438",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-tx."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-tx@5.3.33-tuxcare.2"
    }
  ]
}