{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7135e58a-dcea-5a35-84a6-20d614398341",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-beans",
      "version": "5.3.29-tuxcare.9",
      "purl": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:15380bbc-5ccf-5c45-8694-7b78c2849627",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3828aff3-4ffe-5542-83bb-cb38263c52e0",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e018d202-9815-54d4-8eaa-5ad6ec93ed05",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cafab01d-152b-58ea-b415-b9193dc41f07",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b98619cf-fd16-5cc1-aa97-7f2a42c6fb72",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea432263-5473-5051-9ff9-31550b2c48e9",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6bad9ce8-28ea-5cf6-bb68-e467ad8648e0",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20280e77-df84-50c2-86f8-e955cede2849",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a73da709-ff93-5862-93f8-b08d5a04722a",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c7ad0e0-509c-5d07-8df8-a09660156364",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76b0e576-9bd3-515a-9430-d3f38480f75f",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71c3cd9c-d8c6-554f-894a-e9aef14016c6",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-beans 5.3.29-tuxcare.9."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02d8b96d-b50d-56eb-984c-906c1b7de5f6",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2dfb40b-c4f3-5930-a069-e66a653c6acb",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a29a0735-2d1f-5b77-ba6d-f3aa9c08059a",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8ecd138-4888-568a-8d30-edab86ceaf68",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2fe3bd4-4a73-5a1b-92dd-e181f77055df",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a42fc2b6-78a8-5ed5-9edc-e2207bb4f979",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e97a2af5-b194-5454-be5c-b8f09332b893",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce98537f-4ade-5413-a6e3-df8dd6806860",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62c45240-27e6-59e2-b42a-83bc02f13585",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9c2bfb3-6386-582f-bea9-fd07b4eb53dd",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a21008c9-c21e-5b02-a0d0-cd8a0be88ef6",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.29-tuxcare.9 of org.springframework:spring-beans. already_fixed \u2014 The target repository (Spring Framework 5.3.29-tuxcare.4) already contains the complete fix for CVE-2026-41840. The fix was applied on 2026-05-19 as part of a TuxCare backport for CVE-2026-22740 (commit bc0026ae70c), which addresses the same multipart request DoS vulnerability with identical code changes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab28d8be-7a7f-5947-9149-4ad815a2cb50",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25a46207-6dbe-5f91-936a-16ae90f7cbd5",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d186015f-21e0-5f76-af45-966a47140bc8",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d365f217-1eb9-5c93-82b0-23af6c0b76c8",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f634a3bd-56e8-586f-8603-e661114f6617",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a00cd2a4-c45b-514d-a428-5d8ada99837f",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10221512-b5cb-58c5-819d-b4a638c06e57",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e860b911-7f66-5069-bb63-5c415c365f01",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8fbe8286-4a00-5ec3-9be5-e0e39df80d72",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91d6bdf2-2d33-54ab-ba6c-f86ba296e6ef",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc7d8a8e-3f34-5614-a274-0be4756ca0f6",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e54685dd-52a3-53d8-9eb0-e477edc784df",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd2e2407-9c03-59f2-922d-3df3fb15c52e",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37ffcc27-f765-5ff4-87e2-0cd80ca41bb5",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c50b5c1a-f8f8-51ae-8a17-cb0f5b4d2389",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21b604bb-3f82-5fe8-8935-f6c7492e5423",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c31fcd54-69b0-5cd7-a801-74e4729defe4",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:808b5511-411b-5cd9-a5f5-7884a5f1cf32",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61a91559-7aed-5a0b-b8ce-b9b8a2f7fff9",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9d0fa15-8437-56e3-87e0-46baf29a6af6",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca194dd1-58e7-56ed-9aa2-803996837bc9",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b291249-136f-5321-8553-7cd3b101ef36",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fcfa7bf1-7a59-5fc0-bee0-2ac7ad454a3a",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40698f91-39ff-58ba-87a4-b18dde3bc8f4",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bed8b43-6adc-5a12-8839-90f0c00c26bb",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07930f86-5676-55ec-9dfb-6e34a847eae1",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c606653-c2d4-5e3b-a3aa-e6ad3fa2f3f2",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c755323-0cea-52dc-a493-4b58d3067630",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.29-tuxcare.9 of org.springframework:spring-beans."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.9"
    }
  ]
}