{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:0c91fa6d-1d93-50b8-a6ed-82708634dc40",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-r2dbc",
      "version": "5.3.30-tuxcare.9",
      "purl": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:ce491b48-d710-579c-b31e-d85803f4ebd9",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bf01929-2a04-5b2d-9009-5735c30ab7d3",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afab9193-9c92-5c5c-8f4e-5c41e306a82e",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd3bc25a-6416-50ec-a465-4a7e1598d43f",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1776bee5-ed6c-53bd-a4fe-c1673cf737c7",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1500af0-8a82-5822-8560-dda33252bc27",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:494552cd-a25d-5c25-8131-0b6c0b23197f",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6fb546b-1446-5ab4-af1e-44c7bd1cf40f",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bc9e978-cadc-5fcf-af2b-555fdd47f9ae",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdf765c3-0024-5253-8b9d-8bc40ca97216",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94f994c7-5b74-5929-90a8-82b734e00c52",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a226f6e-63cf-5bee-9f0b-0c373cc6b159",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15c1d34b-4b66-5e69-9ee3-dd3c30d51fa4",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:189172ff-50e4-5f71-b4c2-ec4fae00b248",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be9812af-5462-55f9-a14b-c9fe86f0623b",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4caf440b-95fa-51d4-91da-2afd1e8d470e",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d325f502-72fa-5b13-89fb-be060e230b3c",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e164d27-f92b-51fa-90d1-6cf5ce76a467",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:299207bd-89c8-55ca-b588-85aeb28f1fba",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a38cb8d-2dc7-5d3d-a650-60dfd0b9c811",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8ea5221-8010-5759-b5a3-cc65acee014e",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:560febee-18c1-5f53-9051-48407661fb05",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc. already_fixed \u2014 The target repository Spring Framework 5.3.30-tuxcare.3 already contains both fixes for CVE-2026-41840. The identical patches were previously backported by TuxCare as part of CVE-2026-22740 (commits 1a619adbfb and ee9443b0bc, merged May 2026). Both doOnDiscard handlers are present in the current code: PartGenerator.java releases data buffers on discard, and MultipartHttpMessageReader.java delet..."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:729a738c-64f5-517b-8ffc-f3b22d56a897",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4937f6ec-6b2d-5d27-b935-0d6a74a4ca5a",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1aa54630-aa01-5a51-bbe4-f80c82102452",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30042687-d558-57d0-b5dd-96b9fbaa8d2b",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58540170-3210-5c23-9fea-07c09b642c97",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88af7b32-c05e-56d8-ba54-1e1aa74e8f04",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16c9fa16-67f0-5429-9fcf-2a52a6dd9b19",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4775d01-a4f0-5494-a323-d64d8c634c46",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c161065-f89a-5abe-8392-55bd43042d2f",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb446d0b-256a-5fc1-98dd-57bffd72b2b7",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3444d4e8-acb2-50ac-99ca-2f002d8c1735",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:acaeb695-6db9-5e9e-9ce9-ad3d04e11009",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c73f1573-96c8-5170-aabd-be0d298b2ef2",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51389361-0d24-50c7-b071-82cdcf15fb4e",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a915b11-8a4b-51c8-8002-6efbd282c3c9",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af7d39ad-e757-50f4-89d9-a6723e36c138",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ca864d5-e1b6-55b8-92b3-9b3ff27e138c",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b778f12e-7bd6-5d2d-b16b-accbb0dbd747",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e3a6c11-07f2-5172-966b-1387b2e92fa9",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10c7b1bd-77bd-5d3e-9705-fcd115ea5f7a",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bb80eb8-29e4-50a6-9a30-3ea1f6f697bc",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1c91a22-68ee-5c86-a79a-193ce2d378ca",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:932855c4-e75b-5589-87ce-3de30e437f5b",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a7d4c09-d267-50e1-9d7d-2138ed0fabbd",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11a62133-d590-5099-ad56-6d2e2be5e704",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32b7080d-69ac-5acb-acd3-0a847aba6889",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57851a7b-a712-5486-a2e4-2e1767b3b189",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a90a1828-fed6-5395-ac35-c0956e26f475",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.30-tuxcare.9 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.30-tuxcare.9"
    }
  ]
}