{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:fb59d70f-04db-52e8-a7d0-3e25c0342c9e",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "5.3.29-tuxcare.9",
      "purl": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:772a1056-5cd0-5e6f-be0d-d870a5449eae",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b835465-fe3f-5c1c-965a-b151b39235b6",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:135a52f6-0201-55b0-ad89-9cbd70ca03df",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b95c6c8-313f-5807-8b87-98acbb7ff09e",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54f5c4f7-aef3-5001-87d3-07fdeaf69344",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3f99824-ed00-5c6c-a0fa-1c5d2df3420e",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d5e3949-31d2-5504-816d-cb92064d5ab2",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a72a2d08-1b2e-5a4a-b4f4-abee65c516b4",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d92e3c3e-73c4-5148-94e4-e2755c186669",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40011a65-b824-5cb2-abf8-14f6ad5a38fe",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de335ba8-7dfe-5af8-9ff2-e4c5750bd355",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94edb251-46b7-5f5c-a5ea-4bdf9b9bfa9d",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-orm 5.3.29-tuxcare.9."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e09e4b21-14f0-5867-a048-9c21c5b431e1",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a45c6b9d-ecf2-5192-9b2b-0b43894c1fa0",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:004cc500-dfdd-5ecd-b548-f4cc1d7ffc3f",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b009b206-1772-5fde-ab00-13cbcb1c29b5",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8aa9de2b-1d5f-5310-9790-97c9c68c1c9d",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a704cf92-5d70-562c-99f3-163c93ae94bb",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0142d4d7-2daf-5c9a-9bdf-333a532c9f91",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f268e38-2c58-581e-97f0-cf5096b5dc67",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01f051b8-5d0f-5d9c-81a1-e6bf0773ac06",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69ed3d9d-55df-5ca5-b546-09ba637dd906",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9440d40c-2884-5a79-aea1-b49ab4c7b8a7",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.29-tuxcare.9 of org.springframework:spring-orm. already_fixed \u2014 The target repository (Spring Framework 5.3.29-tuxcare.4) already contains the complete fix for CVE-2026-41840. The fix was applied on 2026-05-19 as part of a TuxCare backport for CVE-2026-22740 (commit bc0026ae70c), which addresses the same multipart request DoS vulnerability with identical code changes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2cc54c8-6b46-5a0f-8e64-92c04217b541",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a682199-f37b-5285-8176-b2c5e2945625",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac0dd795-bd48-5804-8080-b6f1243e9b24",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e51570f-1ad3-5920-a548-086a46f3e54c",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f37ddff-7f72-5a5b-960e-445c8b6ea905",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:384bcb5e-59de-5c83-acc1-2a9c29d736f8",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23e6ccc0-66ba-504f-b256-22a360314224",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2431d250-920b-5a6c-8157-38920903bf93",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e0a4bd4-63e5-59b0-9383-84aafb114076",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25eb1d22-51be-54f3-9ad2-2705d552048b",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f65e6c65-ea57-55be-a054-7a015a1a23d1",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2a803d1-3556-513c-9864-4bc7c928a9a8",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37843437-3306-5435-9795-1a125ef12d4b",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9bd02826-8223-5518-a20d-821f121ab3d9",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d037e0a7-2ee1-58c0-885e-f4f7deebe6e3",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41eceaf0-1c09-52c6-9838-3ad90ec068fe",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e32d6610-9f07-5177-a2be-d221a47436fe",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa4181be-804c-53b0-af16-996914cdb3e4",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e15287f-0989-57a0-bc47-9462233c307a",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fc4576d-dfab-5444-ae7b-ee1593758a59",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8d75caa-161b-539a-82bd-d11514a0b63c",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b45d38b3-f75a-5780-a35e-c18c3ace514d",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91d3d0cb-3112-5c6a-b169-626d6c2a9fe6",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dfec4536-a90f-5db1-b773-6047c4c60d86",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9e180dc-2d9a-5e1e-bd1f-3da0a7798aca",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0aa4f71-02ad-5ffb-9545-77cb559aa4de",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e06b671-f52e-5948-bcc4-2bd500253d94",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8073cc86-ce25-5dc5-ada8-4a78e6811a4b",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.29-tuxcare.9 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.9"
    }
  ]
}