{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:38a36e60-9a55-56a3-8b25-3a5fba0373c9",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-beans",
      "purl": "pkg:maven/org.springframework/spring-beans@5.3.33-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-beans@5.3.33-tuxcare.3",
      "version": "5.3.33-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-beans",
            "purl": "pkg:maven/org.springframework/spring-beans@5.3.33",
            "type": "library",
            "group": "org.springframework",
            "version": "5.3.33"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.33-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2d05c414-9586-57c2-8fd0-8a18746f2364",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.3.33-tuxcare.3 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.33-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e9cf5715-352b-5064-b633-fe5e58621b3f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.3.33-tuxcare.3 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.33-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c3dd1c33-79c6-5e2d-b288-0900614a8586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.3.33-tuxcare.3 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.33-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3b3fe5d7-5b04-5774-ad02-6999ef903f89",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.3.33-tuxcare.3 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.33-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:13ebe81b-10db-58ae-a56c-8dc628769c05",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.3.33-tuxcare.3 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.33-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:655930bb-50ff-56c4-9edf-b2a3d42ae0bc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.3.33-tuxcare.3 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.33-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b78b299c-9145-55cf-8571-c579bae86d92",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.3.33-tuxcare.3 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.33-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4dc8085d-6a81-5ac2-9ca4-22751f55587e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.3.33-tuxcare.3 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.33-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:bac6042a-55b5-569c-bd08-7ef8b8b935da",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.3.33-tuxcare.3 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.33-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5442bcff-69d7-50bc-87b9-76e9b28a2c69",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 5.3.33-tuxcare.3 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.33-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1d295dc6-8415-5c1d-861c-772bdf77804a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.3.33-tuxcare.3 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.33-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:894c8ba1-d953-5c6f-b249-de8b8308dcc7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.3.33-tuxcare.3 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.33-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:04b87077-e138-5dc0-9e7b-0e45a6e7f49f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.3.33-tuxcare.3 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.33-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:da972ed1-bc2d-5537-addb-84b9ea60b8bf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.3.33-tuxcare.3 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.33-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:37982833-940f-5025-b4a9-c90a61f76659",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.3.33-tuxcare.3 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.33-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:49f12071-0d94-5747-97e8-c1dfb302df8f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 5.3.33-tuxcare.3 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.33-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:79fc9f73-6700-51f0-b9cd-10c28f85374b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22965 affects version 5.3.33-tuxcare.3 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.33-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ae3f9736-cb25-560d-a78b-c53b18c66119",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 5.3.33-tuxcare.3 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.33-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:db19a5a3-c91a-5c62-bff4-b3dbb82a4a01",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.3.33-tuxcare.3 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.33-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9413f972-31b4-5a1a-b49d-2fa89f09d812",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.33-tuxcare.3 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.33-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b6981d8c-2262-5b48-9d5e-122f4cec186a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.33-tuxcare.3 of org.springframework:spring-beans."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-beans@5.3.33-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a4c814b2-846d-5c43-8849-bd952a7a8ea3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.33-tuxcare.3 of org.springframework:spring-beans."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-beans@5.3.33-tuxcare.3"
    }
  ]
}