{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e51fe6eb-4e68-5823-80f5-b505bf139e31",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "5.3.24-tuxcare.7",
      "purl": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:22ce6e1c-79c7-54df-afc6-fceb55f17a46",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:089ab9f8-cc9e-5dec-b7a8-561b3d0e4a74",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc8041d0-d7f0-55f6-82c5-ba28ed690c01",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d44e0563-4d36-580d-914f-c8ff764bd2d9",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc9598bd-e664-5675-9824-fd475c99ff37",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f29052b-565b-51ce-94ae-62fe4d58149a",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:827de70d-bc8f-57ec-a0a5-49b3c3a7e19d",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c38aea4-7c4d-59f1-9aeb-acc420570e54",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87a1fd07-433c-598f-a15a-d2f2361da423",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2dbbeade-64fc-5f61-9bd1-0948e266ecd5",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7d55910-be76-5b99-9ca2-e29ebbb2d0d1",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:026c180b-14d2-51be-a706-ace9a612d0c2",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a05cd3c8-527b-5e30-a042-a2ce11e43788",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc4dbe57-2368-5224-9b19-b0c89ee27c58",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:739d2935-205d-54de-9272-a2284764e56e",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1281a8ed-c4cf-586a-93d8-c93ee42a484a",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2ac51a3-6645-5914-b8b3-a3db06d9ffa9",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0869d64c-1eae-53ea-b2af-711d89468dac",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca59e2b0-5ba8-5b67-be2f-e883196dc423",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0390eaca-a0d0-5ef0-98a2-0a8ac89c2910",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1932a882-e91c-5446-b0dd-9c2204b78d78",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a43c514-5f96-533d-9ea0-9aebd552ce9c",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38aa68bb-1f40-53f0-a2b7-52f13a0f3012",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:774f8ebf-4e56-5818-843f-d7dec5317458",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:016d6696-4478-5c06-988f-d212132084f3",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.24-tuxcare.7 of org.springframework:spring-orm. Patches already applied: 7052da453285658215efc1dd5ecb0d472fde2de1 (already in target via 2c11852775 'Backport CVE-2026-22740 to 5.3.24')"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3a3066d-8f0c-5776-b706-e770cf8cef91",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28515e77-72ae-54fa-b539-5cdb5e9a543f",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:428911e5-a64f-57cf-8ed1-8705b195221e",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a9eb95a-17c4-5b84-9383-73f0c8e41e4b",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2dfc4ca1-6dd2-5dde-94a1-774057829036",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3416b5a-b006-5235-a900-970815a7f719",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be2abeed-e077-575a-b842-6e567f6fa8f4",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e780a64c-f6bd-5825-8391-c8309fb988f9",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2dd484ce-b7d0-5358-b9d6-000f62025890",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9041a92-302b-55bb-ba9a-59d70455e21e",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39faadcc-683f-5945-b29b-8bd676fb9c92",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc8fbc88-d770-5a47-b3f6-36d6e2230b12",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22b45e29-0a91-5f86-b8fb-2134b57500e2",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ddc049d1-c5a1-51a1-9d62-186be8f808bf",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13280e1c-9ea9-5480-a2b0-7520dca098f9",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40dfe2c1-dd0b-5de0-ac3d-1b00b746d8ae",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3e65968-e72b-5092-95bc-65afcd078f7b",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7facd55a-9d05-5c5b-865f-4bf0065da29f",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc3ad9c9-8228-5246-a4ef-91e72021e1fa",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19afe8ac-0555-524c-aa55-5da824e4b658",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f5c95a9-074c-504e-9fcf-8bb0056c8587",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfe544e5-3a97-57f6-bf1f-f224d12f77f3",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16ca6a12-6793-5290-b1cb-4ddf667f8203",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60916f5a-0501-530f-897b-47886f49fe0f",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22710cd2-3ba5-5678-bbc7-7e9b9eb0c4e2",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea3f0d58-d87b-5de0-ac74-376bc3f374b4",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff7f5be3-8e97-5642-8ded-68d887958ae4",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:044654eb-a0b4-57c8-aecf-16cf1668efc2",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.24-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@5.3.24-tuxcare.7"
    }
  ]
}