{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:36308cac-4720-5f93-a67e-1c2cb94dc0a2",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-beans",
      "purl": "pkg:maven/org.springframework/spring-beans@5.3.23-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-beans@5.3.23-tuxcare.1",
      "version": "5.3.23-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-beans",
            "purl": "pkg:maven/org.springframework/spring-beans@5.3.23",
            "type": "library",
            "group": "org.springframework",
            "version": "5.3.23"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6888b0ed-2df5-5759-bc4b-1e4121076fc3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.3.23-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a948a1a6-9b4e-530b-87c0-785e3c0f9e81",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.3.23-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:14723f0f-a6f6-52c8-929f-eeefc0197109",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.3.23-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:92ad5b31-30a9-5ebc-8c7c-a91eab6f0b07",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.3.23-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:30b2baac-bc51-53da-9d33-5106b064e017",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.3.23-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5949902b-aa67-5f3c-af79-b8b66b10a84f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.3.23-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ea2a266d-caf4-5d48-bc28-77f6686ddac4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.3.23-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bc508662-62d6-590d-9536-3a57cb9ce254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.3.23-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5d16d1ae-47f5-53a8-8d0b-5f9f5ca4d81e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.3.23-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:300e73f9-41bd-54f3-a076-b8937f0ec219",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 5.3.23-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3075158e-9bda-5049-88af-8fc1a7e57a15",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.3.23-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d7284dee-d832-5fe6-8b21-3ed9e4c1e778",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.3.23-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c1f65f93-1e58-5f09-8f96-96097f5ae47e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.3.23-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:48ec9d9f-aac5-5c4b-9ade-321c669b19b5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.3.23-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c1f33c98-ba09-55ab-b966-5f448ff7a2bb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.3.23-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7978ad4f-7fec-5e3b-a3d3-3630e2524c5b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 5.3.23-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5a05be06-1cde-5e1d-a95c-58e05a6a99ba",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22965 affects version 5.3.23-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b9ccd943-53d4-5698-8ec1-93f4a0f4399e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 5.3.23-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b96cf3fc-3f46-5119-8834-23b07a29d2b8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.3.23-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:57363a4e-2816-5ff0-9e6f-55325e186ea3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 5.3.23-tuxcare.1 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cfc4a507-2681-5bac-867a-b852208ba5d0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.23-tuxcare.1 of org.springframework:spring-beans, and is fixed in 5.3.23-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8da324d2-54dc-5240-a407-b0727743f6aa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-beans."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-beans@5.3.23-tuxcare.1"
    }
  ]
}