{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e6a1342b-a8a5-55a8-ae97-706e5bc53a92",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "5.3.25-tuxcare.8",
      "purl": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:84e3b4c3-db99-5dff-a058-4eb374d4469e",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d317a539-d61e-59e1-88b1-8fca07f3ee8b",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83ccb271-33f5-5382-bfea-3dfacf006baf",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b210044-9a6f-5ca5-bf47-b5f4273391dd",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b246b3c-6d60-543d-8cf7-6bb42eefdca6",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f237391-68ed-5460-b9b9-9ee21f7eeb5f",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94ca50d1-6828-5a48-81a2-8d067ddb0339",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4955e63c-4660-50e5-86ea-033aa06d1519",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1462468-e2e0-5e30-8608-db464bd5212e",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89b5d9bb-c58a-54d5-9db9-a5a1b33f7f1b",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab973f27-725b-56bf-b0a1-1775ed82379e",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64147859-393e-5052-b6c4-9286163c8dea",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7ef9339-6476-5165-9ae4-f300acb4e69a",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1ea50e9-a9b5-55cf-ad6e-f63bf438f0fd",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b883adb-72fe-5910-9c3b-612af21e616b",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:812b2ecb-ccf3-578e-80dd-c2fd3b7a13ec",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63eaf70e-9046-561a-a56c-eba2423e27ea",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:237d53c5-295f-59fa-9b27-dcc8c89b004a",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0e6d49f-661e-58f2-b8ef-bd7b3edfe584",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f69a4492-1e46-5aed-9ed5-08952c73586f",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99efbb63-12b0-5093-b07d-503867ba8ba1",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0bfc441-aac6-540e-bcb7-bed753ea43a8",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9abb24c-3545-5646-9362-f5f7ba2e106f",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afde5432-1eb0-59a4-b8cc-7226312ce1a4",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:818f0bae-9079-5c63-87b7-3d7070a49feb",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e63d2d48-b146-5c08-b555-f2840c667069",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7784c47-e3aa-5310-8ce3-52da5ddbce42",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f2e051f-b537-55a5-b706-6bfa11b4d448",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2d57076-ef18-5ece-9473-0c26786718cf",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a92cdab-544a-503d-be3d-0e89a6bc7e5f",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2beef2e-e813-5f75-8ed9-996e33eef736",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f284d3c-abfd-51f7-af6e-24e9723b7a3b",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.25-tuxcare.8 of org.springframework:spring-orm. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e4116e3-5059-5422-a538-dd1f202a88cb",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a22c2485-ee23-579a-83eb-c318a4ed5f94",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c96c58b-c756-5e63-8e2a-e1cef2910904",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d66bfc2f-d2fe-5a14-9595-1e07324959e3",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0249b5d2-e3b0-591e-9747-3e404802f552",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b7c62b9-be00-5dbb-909f-656923ae11f2",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef2c44ca-baea-5a2a-acf3-352e72c1bd91",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e5b8904-c3e8-5d37-8370-69d9e087db85",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c31c1030-a8b1-58d2-92d3-ce2e5e315ae6",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e2c08aa-ab01-5e92-ae9d-d56bf32575e5",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b058ecc7-c41f-5006-84b4-68f120527773",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:377f770b-7346-571f-9bd5-dfc0b5931135",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50a404d4-91c4-552d-8d8f-2afc41aea739",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f40a1f98-e0e9-567d-a71b-2e376cec1d7b",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0bbca2c7-54a1-53ac-9d93-92f353b8b2ac",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:703cb0ae-50b9-51db-b1df-7138fe3bb9b6",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6d59525-9c95-50e6-ba8d-fd2119023259",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:321b8027-d9bc-551e-a12f-02fada8b558b",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45b0c5ce-b922-5e4a-9843-4990e5a1b91f",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:224d6bbe-686f-545a-9cbc-104263db2c7d",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3dd12050-4593-56f5-ba2f-83468303193a",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.25-tuxcare.8 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.8"
    }
  ]
}