{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:536b4296-9fca-5187-bc4a-90b5cdd372d2",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-beans",
      "purl": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE-tuxcare.2",
      "version": "5.1.3.RELEASE-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-beans",
            "purl": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE",
            "type": "library",
            "group": "org.springframework",
            "version": "5.1.3.RELEASE"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:97d57c1f-6462-5ad1-ab2a-21ff8f86d055",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.1.3.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:64e8b42b-3e83-5f46-93ed-73219661e2fd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.1.3.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a4f57d40-7a12-546d-9560-0daec2fe5ac6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.1.3.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:070f117b-a781-53c4-bc2d-f46081f5044c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.1.3.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c8d67717-76a8-570c-aca3-07ee4b9943fe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.1.3.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5ce02dda-dffc-5b70-8ab0-e06f2d42c194",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.1.3.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b8976f1d-0772-5b3c-a08b-c70802eaf25b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.1.3.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:abe739aa-703a-5f13-8326-d166bc4fe403",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.1.3.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0a3c9f0f-609c-5454-a8a1-d34a5e4926b4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.1.3.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c149a83d-c740-59b5-b577-f99f13cbae1e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 5.1.3.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:176ec5a5-27d1-56ef-ac4f-df8d503cd03d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.1.3.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fd7ece93-cba0-5e56-8731-3957164ae0e3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.1.3.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e0eb3015-4944-5fee-8837-e894de64ee2a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.1.3.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:059a61c4-1a93-5aa7-adec-143524bf629d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.1.3.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4e9f89cc-3fae-51ef-a0be-e8668e77bcaa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.1.3.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7958cb68-f566-5324-9e04-db6923b37289",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 5.1.3.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9adf1161-485e-56a7-99a8-8d53a108f2b9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22965 affects version 5.1.3.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f663ece6-4437-55b5-b7a0-20fd5c6dbd87",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 5.1.3.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:35b8c4dd-841c-5f46-bdce-dc1485703563",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.1.3.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1bac6fad-c4bb-50d8-932f-9523c23b64fe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 5.1.3.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:92dbaf1e-828a-57a9-8955-8bec007a5748",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.1.3.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fffaf367-486b-558e-84de-13da9b516ab9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.1.3.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-beans@5.1.3.RELEASE-tuxcare.2"
    }
  ]
}