{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:31729968-f99b-5584-9071-d7c36172a9e3",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-beans",
      "purl": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE-tuxcare.1",
      "version": "5.1.7.RELEASE-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-beans",
            "purl": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE",
            "type": "library",
            "group": "org.springframework",
            "version": "5.1.7.RELEASE"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f1d533cf-fc87-5fcc-9bc3-2f3ecfc401fa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.1.7.RELEASE-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f5bf39f4-d001-582f-ad72-82d2a707a871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.1.7.RELEASE-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:41aae336-fa79-501b-a5f7-5378a2964acb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.1.7.RELEASE-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1f7da70a-93d7-5587-9086-54fad4aa5e64",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.1.7.RELEASE-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:04c8afa1-c39c-5117-8bb1-5134337b92a6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.1.7.RELEASE-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e5431c8c-eab8-51d5-8aab-da0e1cefe5d7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.1.7.RELEASE-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1f8ab675-2e13-5eb4-9c48-3ea814bb9db4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.1.7.RELEASE-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:60fd50f7-7da9-5467-9d07-5699b0c2820c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.1.7.RELEASE-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:77ed78e3-5e51-5e03-9f6b-574f04fddac0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.1.7.RELEASE-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ddb15871-e90a-579c-a482-e76aaacf01a9",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-1257 does not affect version 5.1.7.RELEASE-tuxcare.1 of org.springframework:spring-beans. not_affected \u2014 The target Spring Framework 5.1.7.RELEASE is NOT affected by CVE-2018-1257. The vulnerability involves a regex denial of service attack via malicious selector headers in STOMP subscription messages. The upstream vendor (Spring/Pivotal) fixed this vulnerability in commit ff2228fdaf (April 2018) by adding a null-check guard that prevents parsing of selector expressions when selector support is di...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bd4706c2-cb9c-583d-8277-a576a3f82cdc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.1.7.RELEASE-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fff2faac-b881-5de7-a1ad-da301461835a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.1.7.RELEASE-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8cb957e8-d781-5726-b2f5-c20236de62fc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.1.7.RELEASE-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4e48e64d-2954-5471-95c0-200ba541449d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.1.7.RELEASE-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:46ca5846-9f18-503f-9a78-8a765c504fbc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.1.7.RELEASE-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0d15b587-3eaf-5815-a97d-d82b6f19f862",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.7.RELEASE-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9722710a-df88-5a73-8090-5c8f2b248211",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.7.RELEASE-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:883bcf55-1232-5846-bd8d-d3599f4ca407",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 5.1.7.RELEASE-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3e1785bd-e6d9-52db-8236-ac68e4fb712d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.1.7.RELEASE-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:607af34e-a1ab-52ba-90b7-682a03798c5e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.1.7.RELEASE-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5a16a7f8-b262-517a-b799-67d567474339",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.7.RELEASE-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c5d4df87-c29f-5ac3-b95f-9b1851a4c5e5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.1.7.RELEASE-tuxcare.1 of org.springframework:spring-beans."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-beans@5.1.7.RELEASE-tuxcare.1"
    }
  ]
}