{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f61a6c7a-43b6-51b5-a912-d9972acb676d",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "5.3.27-tuxcare.9",
      "purl": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:1847737b-98f2-5f48-b685-d28cae1c9979",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fba92346-24d9-55a7-979c-df89c32d750b",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:049c7fa6-5461-51ef-b1bc-dcd9136489d1",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96893fa8-8163-5f90-b519-83ff28a77f6e",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:287537d0-25f5-5f87-a1c8-eaff5fdbe130",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e6083d9-f2c2-5ae2-9f3d-272cc4bf3a27",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3312c326-5434-5dac-8983-c4d4db37dd15",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d39a7f36-fbe7-506a-b3c2-325a30dc49a4",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8725ddf-75ca-547f-8213-9f5ca5b97a09",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc5b0aea-e16e-5cad-807f-74d57c0dddcb",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b758edf3-889a-51c2-9b83-9ceaf5a89739",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4569b5b1-6456-5d20-95de-09a8ea7c0584",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-orm 5.3.27-tuxcare.9."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:534cf612-f506-5859-9bca-ca6b38321421",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:adf81514-98c4-5c92-ba3c-2b84a80819cc",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8601acad-2437-519f-a9b1-daeb610d82a0",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:921f0edf-506c-5566-a733-3ca4001ae4f0",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8b9e8f9-89e0-5b4f-9a8b-911952a501da",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f54bd86d-4c8c-5b46-a903-a7c8ac5cd1ea",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c9af5fe-1f9c-52ed-a2c4-93559b0d8ed8",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8fa8450a-0362-5534-8fdb-3695340918c8",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fbe8eb3-2020-5327-9d8c-c3002fceeb89",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1a3aa7d-2f38-5d85-9e9c-7cd7b2c68f60",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:223cd9ae-c62c-5783-ba10-f29799f919e5",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.27-tuxcare.9 of org.springframework:spring-orm. already_fixed \u2014 The target repository (Spring Framework 5.3.27-tuxcare.5) already contains the fix for CVE-2026-41840. The vulnerability was previously addressed through backport commits for CVE-2026-22740, which applied the identical doOnDiscard cleanup logic to prevent resource exhaustion from multipart request processing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:967633fd-6aa6-5e95-8d09-5d79c24c0306",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f52a9641-779a-533d-8a07-a3acfe447eef",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d3ffe4e-65b3-574d-a234-b4a6c1d99338",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97a11e37-8db2-5a79-b542-788222e63ae8",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:963be812-05c6-5804-8d65-4b601a93fe69",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b507cf5-cd91-57f9-804a-d89529fdc336",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24eb7ec1-baa0-537d-b0f9-07e496c48f65",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.27-tuxcare.9 of org.springframework:spring-orm. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db4e0f14-beeb-5f22-bf5a-dcef6457800b",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:199b5ddc-c8fe-5577-b015-14b72471ad58",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10096e5c-8e8c-52bd-8608-8cbc24134b03",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7c1c284-81bb-523d-bb7f-6c920e0cf6f2",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34e79ba7-2d6d-5ac0-958f-312ef8c80983",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53024e22-0b1c-5a0c-88f5-f9978a8a088b",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b64fa55-11cd-5a3f-ace3-97e85fef3505",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d7cf88f-a74d-5720-9215-e4f8c4be3a0b",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1886e113-9548-5a6e-885f-46b215aa90e9",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a268d29b-8cd6-517c-b62f-fdd7d11cec99",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5cd8567-ed17-5e73-9dfc-7604cd4eb44e",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6e8bf82-a787-501c-a888-089e7939adf8",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1abda28-25a2-5c44-b8c2-147baf9c06d7",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cde4a23d-132e-5bb7-8a42-b7dd0657bb04",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:442e445a-d7fb-57c0-b7a4-bcb6fe4dcfa4",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8de494cf-2d85-5342-9fb6-6760e70743e2",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:574ccd01-c695-5c80-ba43-1e501b433a0c",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ecb9a93-6291-543d-a4e3-47a837f8c995",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e25a088c-da98-56a2-8438-e7b85f040f87",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db8c4c54-2083-5ace-a652-de59389251ff",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4237d6d-2c75-5a9f-a7a2-77538ef61048",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.27-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@5.3.27-tuxcare.9"
    }
  ]
}