{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d90beba3-398a-5322-aea5-3dc5e230805b",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-oxm",
      "version": "5.3.31-tuxcare.14",
      "purl": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:d68ae632-d0ea-5e37-90fb-58bd2defbfbc",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3cb92da2-5892-5d48-b2f1-8a7a155e5750",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b8e47de-faf8-5da4-a837-321801d44e8f",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0bce4b05-3ccf-529e-b1da-16d99b92d42b",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42df7c31-cda7-5a1c-8e4b-f3b75b6e7f11",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b4d7aff-ecd7-5344-8ce3-9500691add98",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c201829b-aae3-571b-b4a3-3d20b5c22a0f",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35d3b3c4-2062-5815-bda5-f6193abb59d4",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8329659c-5dbc-5837-a482-c343bd7e63d1",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d4741ec-3115-5a64-b310-848b08257c77",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c38960d-c4d6-52b2-9369-28efb2537088",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c910ae16-9ba7-5bbf-ac35-600fa032d5cc",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-oxm 5.3.31-tuxcare.14."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0be8a50f-9b56-57f8-ae62-9fbbff2a5387",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19f3df0b-1ed3-5304-8752-118416a4914e",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f5cdfcf-4c39-5f88-9577-f8665f647714",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff7d9ff4-9ecf-572e-8206-76c81f7b7701",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d2a891a-afc5-5d4e-a2ae-ec32e0a16390",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7617629d-418e-5614-ac62-b140866d47c5",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da80e66c-8d36-571a-900d-9b51a083ce03",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf76eda1-5448-5189-a833-5321d7998e9b",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d294f50c-a265-5fcd-b12e-27f4e5a3662e",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:253bdd57-c99b-55b7-b087-022fcaaa6aa1",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a687c034-b07a-5f62-a033-92fc0990080c",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.31-tuxcare.14 of org.springframework:spring-oxm. already_fixed \u2014 The target repository (Spring Framework 5.3.31-tuxcare.3) already contains the complete fix for CVE-2026-41840. Both required doOnDiscard handlers were applied via commit 615477c88f (labeled as CVE-2026-22740 backport) merged on May 4, 2026. The code changes are byte-for-byte identical to the upstream patches."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1f6f75a-cfdf-5fc3-b4b0-dae4850a24a3",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ce80b2d-3deb-55b9-9086-2f16dcd0928a",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:abe25222-485c-5ecb-bf9d-99f30557a5a4",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:280271f4-d6bf-586a-a277-582689552514",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c46ae56-06c1-5b6c-a7ea-473ca0cbfa0a",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:499beb93-0363-533f-9a1c-e8724fb3aa04",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a864196-9c2c-5751-9e79-06e89a9be27f",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6012f6f5-2ae4-5e49-bf20-9d6be460a71b",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a77e0aa5-bb64-5ea5-b459-c27933088936",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39c5d430-1135-530d-b26c-13a61e81e905",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:592e36fc-92a6-53c0-b20f-b7911029931f",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:363a5f91-4d2a-5d53-bab8-e50064fad57c",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee8b0c7f-ac6a-548f-9541-9a194daa7c1b",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ebb0b70-d32b-52cd-a5c4-e1a5c586bce6",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43655dce-3379-5f1b-9a9b-6b34df152412",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75283f19-60f2-5ddd-a772-25c5d0f19f6d",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da5eb401-45c7-552a-87b8-cc7842c392dd",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6cf3a6ee-39ce-5249-9c8a-d2af7b6ede23",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:370cb5cc-81e6-535a-9051-693d851f6c5a",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b27846a9-94b3-5ac2-9396-69e2e80a0aa2",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c014ecef-c868-54ed-afd5-2cfb62247996",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dda8539c-eb05-5dd7-88b9-162762637ece",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d61d327e-cbfc-560f-857d-846170303e02",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d661ea9f-a11a-5ed4-8143-8621ac3b89f1",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:953054cb-2c3c-5bad-b301-3a5356102a2b",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55ed0849-306e-5e50-8e03-b8951e41d062",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b7399ab-687f-584e-a88b-5331639fa5dd",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62d180c6-7c4b-58c1-8b8c-b333f0c828d2",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.31-tuxcare.14 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.14"
    }
  ]
}