{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b06e2fa8-8712-5e75-8a6a-395e39c2bb17",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-context-support",
      "purl": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1",
      "version": "5.3.5-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-context-support",
            "purl": "pkg:maven/org.springframework/spring-context-support@5.3.5",
            "type": "library",
            "group": "org.springframework",
            "version": "5.3.5"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:539bd28a-59e9-5bb9-b5a0-91c6b190a35e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:23570be4-62ef-5983-aa23-a9424b338922",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:83c52ead-7b83-58bc-a1f7-a90da686c0bf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7e39254d-0911-5a00-bcc5-18ecf8540cc2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:442fa893-4733-564b-9ae5-1dafe1fe9609",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7337f7fc-619e-5e4f-9fba-ebb462c81bc2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5ed68da6-7715-5a81-a01e-58dd2a965cff",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:21cfc165-c497-57b0-aa26-bebdcf74cc12",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cd0c59e2-89ef-5772-a54f-dcf58c6782e9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:49cba55a-95c8-5ff4-9f60-65482f046f5a",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-1257 does not affect version 5.3.5-tuxcare.1 of org.springframework:spring-context-support. not_affected \u2014 CVE-2018-1257 is NOT present in Spring Framework 5.3.5. The vulnerability involved unguarded Spring EL expression parsing of user-controlled selector headers in STOMP messaging, which could lead to ReDoS attacks. The upstream fix (adding null-check guards and the ability to disable the selector feature) was applied in April 2018 and shipped in the upstream Spring Framework 5.3.5 release that Tu...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8e71764f-9b42-5d2a-86a2-b5b57d232ea5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:24e625b8-1fd3-5a00-ba89-a3f7a8063a48",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:77bf9214-4ffc-5f7f-8b00-f0f870449840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b3cc4d0d-c488-5754-903a-3a805ca0169b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d4844307-2a54-5bbf-9683-c0a967b2a9b7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6b5319e1-d3bc-5f68-865c-3665ac5c5a56",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2022-22950",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c8de6e5b-7ca8-5948-ad86-ffcafcde8a29",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22950 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e7cd2abe-995b-5f3e-ae85-d62b5292671e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2022-22968",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b03c74ed-e4eb-550a-b8fd-6887f7de8881",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22968 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support, and is fixed in 5.3.5-tuxcare.2."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7325f01e-312a-5e5b-923c-85a0f59168ef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e45fbcf4-5457-5dc1-a92f-5d25f4a9fbca",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20861 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:18a432dc-472e-517a-a791-a49eef9c7467",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:966fae84-8e1c-599d-a1af-0a9e9e5b9581",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3682d4c5-ce06-54cd-8759-0b9a704ebead",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38808 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fe7418e4-3f88-591a-8c3e-3983834bd68a",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2024-38820 does not affect version 5.3.5-tuxcare.1 of org.springframework:spring-context-support. not_affected \u2014 Version 5.3.5 is NOT AFFECTED by CVE-2024-38820. This vulnerability specifically addresses a flaw in the case-insensitive field matching implementation introduced by the CVE-2022-22968 fix, which used toLowerCase() without Locale.ROOT. Version 5.3.5 predates the CVE-2022-22968 fix and contains no toLowerCase() operations in DataBinder. The vulnerable code pattern (locale-dependent case normaliz...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:80c04345-ea81-510c-a395-29de6602aa60",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:435ab2d0-42f6-5be2-92ca-caa6d3ddd3e9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2aca01a6-8f9f-554a-965f-991636b6f9e8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:576c7d69-a8e7-51f4-8a99-1b54edd84083",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ee90410e-457b-5ae2-a421-2e261fac54e8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ab770568-e1da-5fe3-a210-53b640cdd772",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:18ed85ae-840b-5931-a840-d34c95bb0a12",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0a80a990-8dfc-5603-8404-6314029e3ce9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2e664dca-6933-5b62-971f-c3f648f4abc9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6713d546-2888-52b9-a6c7-e6e9fa0bbc67",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3e018cb5-1ade-5ebc-9b08-505a0e50fae7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.5-tuxcare.1 of org.springframework:spring-context-support."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-context-support@5.3.5-tuxcare.1"
    }
  ]
}