{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:903ac894-0e34-5f0b-80e9-a59b5bf4747e",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-test",
      "purl": "pkg:maven/org.springframework/spring-test@5.3.24-tuxcare.10",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-test@5.3.24-tuxcare.10",
      "version": "5.3.24-tuxcare.10",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-test",
            "purl": "pkg:maven/org.springframework/spring-test@5.3.24",
            "type": "library",
            "group": "org.springframework",
            "version": "5.3.24"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.24-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:1c048a86-1987-5479-a2ee-0d45ae1de1f7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.3.24-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.24-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:933d88b4-51e8-5c77-94e0-b8db6c071ae4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.3.24-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.24-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:a83a7541-3eed-5ac7-8eee-7c6e2c765b75",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.3.24-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.24-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:596eaff5-81ab-5501-9686-8f24c9b89ef7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.3.24-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.24-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:b9f74e11-abfd-550e-a0ba-e6914fd26a2e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.3.24-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.24-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:b67916d7-9449-5472-b387-ee2c7160d968",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.3.24-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.24-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:f3643110-b560-595c-bb5c-ca55c95ff437",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.3.24-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.24-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:380686ca-9056-5f61-8ef7-cc2b7cd8d858",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.3.24-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.24-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:c7fdb929-e9b1-5acf-b0dd-c6034db71fdc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.3.24-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.24-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:fc73933a-2fdb-5028-a0d2-650fb956f7ab",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-1257 does not affect version 5.3.24-tuxcare.10 of org.springframework:spring-test. not_affected \u2014 CVE-2018-1257 affects Spring Framework versions where malicious regex in STOMP subscription selector headers can cause ReDoS. The fix that addresses this vulnerability is fully present in the target version 5.3.24: it allows the selector header feature to be disabled entirely by calling setSelectorHeaderName(null), which prevents untrusted selector expressions from being parsed. This fix was in...",
        "justification": "requires_configuration"
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.24-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:1455ec68-e34c-54bc-afc3-492e9754f974",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.3.24-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.24-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:a79dbdf3-0a31-57c5-b44b-66d1c5d5d98c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.3.24-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.24-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:f93dd5c9-9fa0-583b-ae61-f695e38c7335",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.3.24-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.24-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:c9011a26-48e3-5f2c-a5a9-be4c3db29835",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.3.24-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.24-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:e396716e-fa48-5955-ab68-c139a5268583",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.3.24-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.24-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:663019eb-9bca-5382-862b-9232807ad69d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 5.3.24-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.24-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:2f35df90-dc7f-5551-83f6-e34370e15e1d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.3.24-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.24-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:24577a21-0b92-5331-9f1c-71bbbcb6fa24",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.24-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.24-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:b0f0d0c8-38fe-53c5-ad9b-5fbcd0337611",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.24-tuxcare.10 of org.springframework:spring-test."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-test@5.3.24-tuxcare.10"
    }
  ]
}