{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e447976f-e514-5a31-a8c7-58d8290ff1f2",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-instrument",
      "version": "5.3.31-tuxcare.14",
      "purl": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:f3eb9e53-1baf-5fca-8b5a-e8d93edf19fd",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2278cde8-f155-5b29-bd63-695ad0a33559",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd42b380-f877-5a04-8eb9-55dd3d088649",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e4e8327-b8ab-58ee-9bbd-9036b0fd0b18",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82628e2d-9635-537f-89da-a0032c8eda41",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4a370c3-cee9-5bdf-b5f3-8f744ad407ce",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d06260df-49ac-59bb-bb21-259a51dcc0db",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fc1456a-8632-53b1-84b0-5e76937a437e",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5b43832-00c1-5329-b632-5e7fb2948af9",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:179631c4-d48e-56aa-b1ee-7cf22f33faef",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61054211-ff6e-5915-a6ed-64906dc3c707",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db6aab4d-bcca-5c1b-8b03-5d0bfab2907f",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-instrument 5.3.31-tuxcare.14."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e07220b-1b1b-581c-9da5-e7ca4b446fcc",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8efc45f9-d679-5994-922e-6db870c4e490",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e52eeb5-5a72-5062-887d-97e0e1c5e56d",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f887c721-1661-5c74-bf53-4dbb9a5da26b",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a046a50-ad70-5462-8014-7246dc229406",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b994715d-2eb4-5638-98dd-9a164d018598",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbdfe890-903c-5b61-8183-7db5c24e566f",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:749cf7f1-5615-5481-8258-5c0e802f0112",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3fcfa4aa-e318-56ef-8a68-cee88ffa1d6e",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8dac5156-0fb0-5b72-a61b-8dfb0b99e723",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6350640-4ce4-57ec-ab42-7d999a807de3",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.31-tuxcare.14 of org.springframework:spring-instrument. already_fixed \u2014 The target repository (Spring Framework 5.3.31-tuxcare.3) already contains the complete fix for CVE-2026-41840. Both required doOnDiscard handlers were applied via commit 615477c88f (labeled as CVE-2026-22740 backport) merged on May 4, 2026. The code changes are byte-for-byte identical to the upstream patches."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05f3e9d8-9c1a-53c2-bf0c-0bdb21ef619a",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aedc0656-b29e-54fb-bc63-5195c4991ca6",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fec53b2b-5ef6-57f7-8fdc-be63f9f3cc26",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e4596d3-0dbb-5a7b-ac74-2b90b5934566",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e3a718c-a4d6-5397-8bfb-9418f3e0ccbb",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bb6840d-e544-58bb-89ea-15c5a7ae99a1",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f001b29a-7b5d-5a06-976d-8278653401a0",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c82d1a29-cd4a-578c-a7e8-4b7fb2468f11",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:032945a7-c2b1-57ac-b196-b508694a3418",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57cea6a3-ddf2-5f9e-94f6-7ff7826a004d",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1dca973-20c2-54ba-885f-9ee85793b817",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:592f857a-ed2a-5663-bd24-f4aa7189a0f8",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05a09338-bb52-5fa5-bc5d-497dd49457c9",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d00698f-247d-5c3b-a025-91f97bbf1c94",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd86319c-ac02-5ee7-b89b-4489344397ad",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c675e0ce-e24e-59fe-9250-2ee7a72def6b",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9776b08e-0569-5c38-ab6a-f3c80ef54945",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4808f5f-108d-57a3-820e-9d1898b168b5",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69c59080-95c4-5ee8-89e9-8b360ad7dad9",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc95e98b-e671-562c-bb81-a90f190ccd42",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f163ffc5-d8f5-525b-a846-4a8b5dd8aae7",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:510b6e6a-aa20-5f75-b97e-a817dca88c9e",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a24b61a-08a8-51ad-bfb3-d5fe0559c9e7",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b65e5278-732e-5d3c-943c-4313224bca3b",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d32564e8-f304-50c1-9e87-875caa5a0f83",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9a17e22-06cb-5f63-86c9-290848332c88",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1395c72f-7863-574c-a38b-877dea58d2c8",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60b1e991-fc77-5727-9a62-26da97223014",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-instrument."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-instrument@5.3.31-tuxcare.14"
    }
  ]
}