{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2ee45df3-ae9e-58e8-a179-57d2ec23ada2",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-context",
      "purl": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1",
      "version": "5.3.15-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-context",
            "purl": "pkg:maven/org.springframework/spring-context@5.3.15",
            "type": "library",
            "group": "org.springframework",
            "version": "5.3.15"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e5f7aa51-d6eb-502e-a5e6-caa4c9faa926",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:efae2701-9584-5901-92f5-334097b3ec52",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0346dffb-1766-5571-80ec-6a4359bfe134",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:566f4e5e-bc37-5781-9a7a-c914d1c8778b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bbf41427-a798-53fe-9aa1-ba7a6f4d7530",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3894e23d-f588-5253-8a15-095a5bbb74d6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bb27bb68-ad43-50d8-a720-744d7e6ac10c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d920b055-7069-5d2a-bb32-ca1f56884a5c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:99b1f3e5-ab6d-5834-ac03-ed0214f1f241",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8522c4fc-79a0-5f01-88df-2f5a2ee0b93c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:03fd101a-9ca7-547c-9933-a134f94266dc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:135714b7-f027-5d8c-99f0-eae7889b6b88",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3fb380d6-44ec-5f87-a9c6-aa877a3ff7f4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:da675ed8-3207-5396-b65b-8dc227b480f0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4dc34138-1bac-59b7-95de-0f5ebb330704",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:922551f3-46c2-5933-bc89-ed950cd2018c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2022-22950",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9faf57ac-b6e6-5436-914e-36cc586dd77b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:47767d49-4fd5-54ce-8103-2b094155a2d2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2022-22968",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5f846beb-93b0-5097-830f-23483f3c3b37",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3a905f6b-1c65-584b-ac3f-ada00aa95ca8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ceaecb6d-87b8-53f2-a2c6-6127276c6d11",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:361e9609-b62d-5871-9f12-f399a3a6db65",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20863 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0871dfa2-9ec8-5f46-a622-22206673a8de",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:af567294-9aca-5073-b7a7-299c38efa3df",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ee6f46df-1489-5ae4-b8c6-67f383623fb8",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2024-38820 does not affect version 5.3.15-tuxcare.1 of org.springframework:spring-context. not_affected \u2014 Spring Framework version 5.3.15 is not affected by CVE-2024-38820. The vulnerability pattern (locale-dependent toLowerCase() in DataBinder's disallowedFields handling) does not exist in this version. Version 5.3.15 (released January 2022) predates CVE-2022-22968, which introduced case-insensitive field matching via toLowerCase(). CVE-2024-38820 fixes that toLowerCase() to use Locale.ROOT. Since...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f69c568d-c1af-539f-9c36-bea1ac5a0d20",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:eaf516c5-ec37-588a-8e27-adf0b084943a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8ffe356f-6e37-5666-8cdb-77073bec082f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dee4c601-e961-50c1-b09e-8b4a2fa1ff5f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:96f5d121-ad51-58ec-bba1-830621d825c6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a37b253c-52b9-5af4-9d95-04ea265809bc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0db42e4a-61bc-583e-9d65-c8bce1f2fd38",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:49ad4439-d4d4-5558-a51b-d1f6a93fcc66",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c72719c0-c69d-55c3-8428-752b58cf5a1d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d252d929-6cc7-5082-8978-90c63ab72716",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.15-tuxcare.1 of org.springframework:spring-context."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-context@5.3.15-tuxcare.1"
    }
  ]
}