{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6ecad717-6923-52b4-bdaa-61657c76dde7",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-context-support",
      "purl": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12",
      "version": "5.3.37-tuxcare.12",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-context-support",
            "purl": "pkg:maven/org.springframework/spring-context-support@5.3.37",
            "type": "library",
            "group": "org.springframework",
            "version": "5.3.37"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:334b2218-6858-5831-95fa-bbfe4446b766",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:3268f335-d361-5623-b206-3670651bcb15",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:f70dce1a-065b-5d82-8cff-b516e73328f1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:5c7ffb7c-e3b5-52ba-a102-a8509e45a3a2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:865467eb-655c-531f-999e-965dbe830f04",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:78bbd0d6-9d60-5353-848a-c7b780e5d0ea",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:15b6a0d4-86fa-53b0-910e-de9f5a77a8ff",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:b9418d49-1899-550e-b931-d1d271f5f9c1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:b4ddb902-c32a-5db1-8a02-3726ff6d1ae0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:01f4055f-e76c-557a-8c34-f7b48f4f434a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:b9df4a26-97fa-5df4-8a80-d3329ed867a8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:3f2270bd-20cc-5260-879e-45ae16e05865",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:81607d35-69e2-563c-bdc5-2533dc6e62f2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:04f8ac63-ca05-5100-a71e-e35bc3775aab",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:222deb54-0cc2-5956-9113-82daf99411d1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:3afd9483-7f20-58b7-9d24-b1ceb8d6e51a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2022-22950",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:6840834e-66b1-515a-9a9f-73873e806081",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22950 affects version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:803dd1ee-0940-5c4b-839e-611ce1f4041c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22965 affects version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2022-22968",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:17cd6fa4-dc51-5aaf-a054-d1935bb8abab",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22968 affects version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:574e0b03-e3f7-57e3-8ca7-b51e4a9170f1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:79d9541f-4fae-5c5d-a459-fff11de66c63",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20861 affects version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:c850adc7-6b87-5afc-96c3-8247da63b249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20863 affects version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:a8b9148c-ea37-56b9-beae-8c0932a01145",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:7ebd1540-30be-5b16-aa00-8cfd4fe7c699",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:dd2f60f3-557a-55f4-9838-1a8fde445d2f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:e30f26ee-04c0-5bb9-a986-303f863b0a6e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:02215abb-6418-5805-858e-9dcd232a7f84",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:24606c68-e63a-51c2-9265-d43af5c5efcf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:e797378e-edb6-5735-b0d6-b3203f11d2f6",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41849 does not affect version 5.3.37-tuxcare.12 of org.springframework:spring-context-support. Already patched: all patch commits for CVE-2026-41849 already present in target branch (momus prerequisite AllPatchCommitsAlreadyInTarget).",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:2a12f9c7-920b-5156-b839-bf77de2d6ba9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:77d37653-44fc-58a7-821a-03cc65c5af16",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.37-tuxcare.12 of org.springframework:spring-context-support, and is fixed in 5.3.37-tuxcare.13."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:b9355f06-e3aa-5b0e-9d33-61e94b03127d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:f93b542d-2bf3-5713-b833-a14c8650bb73",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:c97b5a6f-95dd-57c9-9e32-1ef3dfdee7db",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:d3f984c5-58e4-5a2f-b4c1-1a11ac044037",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
        }
      ],
      "bom-ref": "urn:uuid:732e6dab-2144-5fe0-9658-f11946ff154e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-context-support."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-context-support@5.3.37-tuxcare.12"
    }
  ]
}