{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5fcf980d-b768-560e-a0a6-1ab6d3eb860a",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "5.3.25-tuxcare.9",
      "purl": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:c9ecd506-f73c-5332-8d52-3b3e381ee12c",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f989122-d8c9-5164-bfd3-a10b33eaff80",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0603d272-c26b-53f1-b3cb-fa3c1c373c83",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5c962a4-12df-5505-b8eb-00bf220c6c1a",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4db54d5-b908-56f4-957b-3f43ad197b43",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67fa2f1e-38f7-5663-a834-9d6f88839460",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1cdae64c-4130-5568-99cf-a8e9b10221b9",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efc96c6d-2ea0-57f0-b957-62b3c2f90b20",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1cb3bbc-6780-57c2-8d23-ed0e03a3983d",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a47d406-ad1f-51c6-b82f-2249ff9e3371",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:363c045e-6e54-5cf1-bbff-3e24eecba48e",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:747b2da8-ebf8-5d41-9e9a-06c705bedac8",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea355b2d-2871-560e-bb84-3ad22eb82391",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98a497a8-45ab-5864-958b-cfe6a8ef1f5a",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:963231c4-5382-548a-9344-c8d541de9a77",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29090b15-66a2-5478-87c0-d1a2c30e5fa7",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fccd7234-0129-52cf-8002-ce84ed9b58dc",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d7f6260-6413-596d-841a-8b8bd2a9a5bf",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e10e92dc-0e3f-545c-b52e-ad9684ab0d92",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0f3a723-97a8-554d-abb0-c3de0c1c1330",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb78496a-1db5-5514-88f9-032e202d42fb",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2acc134a-a53f-55ab-b858-4c67b7694efb",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce34750a-c621-5242-94cc-df719e015c52",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:917a5dde-4247-52e4-85c6-17a9fa2c2332",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43c6136f-e83b-5cce-a68f-21be0f6f1d08",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5de5d401-3865-5826-a587-a347a01d0d34",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22db52db-4bd0-5ab2-941a-602c3127ac66",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2bc5c947-6f1a-5bb7-8818-848422f83f88",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc67e324-c248-5fa7-aca4-0585a09934cf",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7805bc9-1d78-5566-b0fc-674f6d1eef52",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eca308c5-8f9c-5515-a33c-73ac308ad842",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85713c07-bc44-5fd4-902c-6f4236a798d3",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.25-tuxcare.9 of org.springframework:spring-orm. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:959a9d44-f6d5-55f7-8645-f14e9c3bc792",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bae35373-dbe8-5c3a-9f49-9dceaf81bf80",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1016a6d0-712b-5e7b-90ec-54f4542a4d01",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75e0efaf-9305-58a1-8009-0d32e52bd76d",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a198961-1cc5-593f-8403-e22e096fae45",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c798cbb-b3bb-58eb-8d10-37106fce06d4",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c71f720-fb27-5b73-b122-7d4f467a6480",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e02a7c1-4926-5d48-88a7-9fe47674295b",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b176440d-0e3a-5515-aa96-0541ee3152dc",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:719873bd-51ef-5e5b-a8c0-1c3ce5b6b91d",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0da2dad9-7a51-5ff8-bed7-6fa8bd72ae1b",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13f71961-625f-5ff9-bfe9-c6952970bc6a",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5098936-a48d-560f-9cf9-b12ea386722a",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a21b4c1-3f04-5581-9238-91ff113f9716",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a2ca079-41c7-5626-80cf-5a48b96c0a16",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef762ba1-608b-5acc-9123-e1c20721fab2",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc61f094-0568-5c5e-a6a1-cf436f45b532",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08397927-c8e5-53ef-900b-96b788c8a5b9",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:757046bf-c687-5981-a7de-cc5f0b37b19d",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d2282c4-b2ce-595c-9563-e14293b5d16c",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5480d9de-03ad-58d6-9053-b72ae9d2ea8d",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.25-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.9"
    }
  ]
}