{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9cc25001-9ef9-5ea6-b796-4d385322f545",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-beans",
      "purl": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE-tuxcare.2",
      "version": "5.2.8.RELEASE-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-beans",
            "purl": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE",
            "type": "library",
            "group": "org.springframework",
            "version": "5.2.8.RELEASE"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:cbd666f7-2b94-5276-92b2-2d43f7bff7fe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.2.8.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9d869ae7-a073-5d20-b929-a737d2bc0267",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.2.8.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1fe41315-27d0-5f46-96cc-5642e0f62c29",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.2.8.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0a498d4b-359d-53a4-8e41-db8adcddceef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.2.8.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a258bbfa-d46d-5460-a2a6-070afb115aaa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.2.8.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0bab811d-c947-5cd6-b511-43b9499c1db7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.2.8.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:796a79ce-8ec6-5826-a66f-6a47f6fb1953",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.2.8.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6571da40-c33d-5159-a3ed-9f1fccc3cc3c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.2.8.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6b2c50cb-7555-5a35-99f4-995269f761aa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.2.8.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:03002519-2349-5e71-845c-a1a15944ea45",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 5.2.8.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:228d56bb-abf6-546a-b83a-920172ca8e8a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.2.8.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1a9c880e-139a-52ed-9cfd-9e2506313ad7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.2.8.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d349da63-d8a2-5403-b03c-efe247a2627b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.2.8.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:cdb3e9f1-46e7-5b1f-bb9d-475475de2764",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.2.8.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5ffbf168-dabe-50b7-a1da-885e0d958073",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.2.8.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f7c03718-e4e3-53f1-b57c-e69a1f703d6c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 5.2.8.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:462349e9-f246-580a-a782-1114c56dba62",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22965 affects version 5.2.8.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:cb41139b-4b39-5bcc-8bf2-710d3899ea51",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 5.2.8.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:06d32f07-9d3e-5213-9609-3077cb39171d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.2.8.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:97ce3691-35c6-5ce7-a4bf-58429a5ac523",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 5.2.8.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9656e23d-5867-589f-b7be-e61b252f9ef9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.2.8.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bc71eff2-8215-5ba5-97b6-d1378ec7e12d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.8.RELEASE-tuxcare.2 of org.springframework:spring-beans."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-beans@5.2.8.RELEASE-tuxcare.2"
    }
  ]
}