{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b8a1843f-15de-5c21-a6be-1d1dd8dc7d11",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-context-support",
      "purl": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1",
      "version": "5.3.15-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-context-support",
            "purl": "pkg:maven/org.springframework/spring-context-support@5.3.15",
            "type": "library",
            "group": "org.springframework",
            "version": "5.3.15"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4648c1b3-ae3a-59c3-bc91-45660a89ae81",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ef24c2ed-a094-5e74-b129-bf64b65b5200",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c1059fd8-8077-5d86-98d6-4b8b278c5fb0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:371a2535-8a0c-5d74-b0f6-3bb14ffe8846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fd17fd3e-d4ce-51eb-a3cd-c5d160fea542",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:32e58561-03c2-56cb-956b-1cb222f83cdc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7b837ec7-4d93-5370-9517-135ab25ea115",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a69264bc-4922-5fdb-8ba4-e598b3a2fa90",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:02b98c06-cd1a-55a0-9822-9016a87bb566",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cbd0d26f-13b8-59e6-b90b-f5e2ace3b419",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2da343ea-254d-5cdd-9bb6-7318c0cf2285",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2e5170df-1bc5-513d-baa8-743eb3c5065e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:38a2aafd-ca1d-50a4-9755-594b80a10bba",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:74ce3824-15f7-557c-895b-535e31a64896",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0eba513f-a54e-588d-969e-bebaf42485d0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:54c526e0-7c41-57c4-b9c7-7280d05ef05a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2022-22950",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b5698660-b8da-5e95-8b03-71e695127357",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:59296505-bd57-5377-958f-6ff61e454e8e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2022-22968",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f825bf4d-f8c2-5765-974f-2b232e85a17f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ddb47f6c-1a91-57ee-bc3b-479554c07dbc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4202a19a-262e-53d8-8016-a3735d5e47dc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1f93fb08-1eff-55cd-9cda-1bd5b3c8ebaa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20863 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:affc850f-1c95-5017-9a1f-b8fa4465b64d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:70bdde7e-9dcd-5bf3-843d-dcd9102b88d1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2df726a7-dcd5-5231-b450-99dacdce6c20",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2024-38820 does not affect version 5.3.15-tuxcare.1 of org.springframework:spring-context-support. not_affected \u2014 Spring Framework version 5.3.15 is not affected by CVE-2024-38820. The vulnerability pattern (locale-dependent toLowerCase() in DataBinder's disallowedFields handling) does not exist in this version. Version 5.3.15 (released January 2022) predates CVE-2022-22968, which introduced case-insensitive field matching via toLowerCase(). CVE-2024-38820 fixes that toLowerCase() to use Locale.ROOT. Since...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6e91966f-fff4-555d-bdc8-ef1b9d582a0e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2b4b245c-8801-51f1-b63a-4332c01e0ae3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cacd3e51-ed08-51e4-aae4-6128de569605",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6d27e0f9-8f71-5cd5-bbae-a93428e33534",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:39f2467c-6c2e-51e6-ba14-6fe20848ac59",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:24929e1f-93b4-5b83-82e7-3561e623791b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f1f3d44e-fe14-5c10-b4af-8103465bd30c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ded7f958-b83d-55fa-83c2-9998680b1168",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:51afc1f4-c867-54ac-bec6-ef898819f8b5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e8ec1149-a443-5830-b69f-4f3949fc4d8e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:be9c2408-0a8b-563a-baf3-a28c83d2c1d2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context-support."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-context-support@5.3.15-tuxcare.1"
    }
  ]
}