{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6fd65183-fb19-5aaf-ba94-028e65e73506",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-instrument",
      "version": "5.3.29-tuxcare.9",
      "purl": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:1a0dcba2-9c2d-542b-9b0d-02daaca4b245",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:449dc9d9-6641-5524-96e3-9d62339eab85",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:348b2eac-c995-5ff8-b005-494888f562e7",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b6cb3cb-722b-5d15-ae3f-7dbb8bca8bd1",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3775b79c-ccbf-5704-b396-4b8b9318b6d1",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ffee0e49-8b81-5cfd-a99e-9ad66e886a1e",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c3f30c9-3cde-528f-9df3-a9ad24f91844",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0c3dbad-ead6-56f5-8a0c-848861e3d09e",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:738ae684-94a6-5977-8ed9-49399204bbe2",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ed9dc12-53ca-599d-8ce7-8be1b36931c7",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f4421ff-184e-5aba-9889-21e1d9ea9b7b",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bcbbd071-1d58-571a-8b13-cb22cddc3a13",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-instrument 5.3.29-tuxcare.9."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa41b68e-096f-5939-872a-1b697e47f79c",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb640991-78ac-5d04-ab99-5ac38f915d28",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d01dc83a-3f23-5692-943d-9f4c608f3d7f",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed353991-f1ac-550c-8d81-43548e90c3f4",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eeafd7bb-c7a3-5d9f-b8f5-b9dd81aa44bf",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c94471d6-bcdf-5e07-aaa4-e69c98f94739",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26cd57cb-9a29-5cb6-b76b-f713243faa8b",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55ec8a10-15ea-50c5-b5ce-6c7f3a374230",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a90bd561-b431-5604-99c9-c8e0ef7d9ff2",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84502566-35fd-571b-b8b3-ee446497dfb8",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4525500e-874b-5a53-b376-d32a3f222680",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.29-tuxcare.9 of org.springframework:spring-instrument. already_fixed \u2014 The target repository (Spring Framework 5.3.29-tuxcare.4) already contains the complete fix for CVE-2026-41840. The fix was applied on 2026-05-19 as part of a TuxCare backport for CVE-2026-22740 (commit bc0026ae70c), which addresses the same multipart request DoS vulnerability with identical code changes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3298a63e-ac6c-5cb4-9aa9-74a1fd695116",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb934c66-06ca-5255-9138-c2ed3625aed8",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b446324-0fe6-5648-952d-56637f9af5f7",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4812165a-d3e1-5580-9ead-f4407fec7f0b",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08f2e0ec-17c4-53f6-961c-985ae7b48efc",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3be429a2-26e5-5313-8854-e1ba7c14c06b",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7da281f-2592-55ed-8cfd-e78ad1f9a5b4",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0c61ea5-cbb6-5143-bf40-9f7442cf21e1",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17fade87-7cb5-5cc8-b1eb-ce4fe98aa7d4",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5b543a4-a6bb-5388-84e2-4c376055396c",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92dec53d-97f1-52d2-ac76-dd3bd6e1cb13",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47954d3b-3a4e-5b86-b377-215b83eca1df",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdb00284-96f0-5dd1-b6e4-5ba91a2aee85",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01cace82-d59b-5ab3-a542-2660cb28e2df",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b5fa833-bbc3-5d26-9f2d-56fb4659c34c",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ec9a5b5-d562-5ba2-b3f6-bad657f5ad37",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82ab3343-fa5a-59e2-b7fb-23df41558e76",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb8d625f-d547-5504-9aa7-6e9933c23630",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e5cbec5-ae66-50d2-83eb-b78e6fc0d822",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc90d482-ae70-59d0-af80-c94931cf2a36",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bdb2b4b-ff86-55e2-8a81-5c7923dc5987",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3712ff35-2eea-5796-9a2c-6a815ef751ae",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e97a55cb-4954-5aa8-9cd6-7337459e5d84",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f238cfa8-1d4e-5361-b920-08d78fd102ea",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b29954ea-c015-575e-aa8a-0d15d22daf76",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4401ffbb-930c-553b-a612-527389bc68cf",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b7502aa-5f0b-5bf6-98ee-bb0aed5ea241",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f8d740f-4799-513f-9353-5ffc1d694288",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.29-tuxcare.9 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-instrument@5.3.29-tuxcare.9"
    }
  ]
}