{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c9270d14-59f1-50c5-8f81-0023a1205021",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-test",
      "purl": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.10",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.10",
      "version": "5.3.25-tuxcare.10",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-test",
            "purl": "pkg:maven/org.springframework/spring-test@5.3.25",
            "type": "library",
            "group": "org.springframework",
            "version": "5.3.25"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:5796db19-d5a8-5f1e-a52e-18bd0733830c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.3.25-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:b8a6f8eb-8d2e-5234-876c-c11c8bd44f2d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.3.25-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:b8192970-50e4-5e02-9a22-a38d80a72d74",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.3.25-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:e702f261-364c-595b-921a-2d2b23c6f0a1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.3.25-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:14661cba-4a64-5fac-8f36-385bdeeb21f7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.3.25-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:bb54266e-66dc-5a38-bbb8-175b33dbb806",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.3.25-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:78eca79f-dfc4-5f5e-aa93-a8b6ed364871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.3.25-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:63601201-04cf-5d38-8b54-d623e14864c7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.3.25-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:a6643651-f9ab-58dd-b985-f7a6605fa0dc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.3.25-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:01fda853-319d-57c8-acb5-86910b8fba41",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-1257 does not affect version 5.3.25-tuxcare.10 of org.springframework:spring-test. not_affected \u2014 CVE-2018-1257 ReDoS vulnerability is not present in Spring Framework 5.3.25. The fix (commit ff2228fdaf from April 2018) was already included in the upstream release. The vulnerable pattern - mandatory selector header parsing without ability to disable - has been replaced with configurable selector support where setSelectorHeaderName(null) disables the feature, and getSelectorExpression() check...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:b6d76aa0-8cf1-5d33-b4a3-f172e55d17c2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.3.25-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:6bf4adaf-d991-5f14-b308-7f62e82bd4f9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.3.25-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:ad3d0d40-3066-5a6e-bef4-32ab4b593de9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.3.25-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:ce00f0eb-04db-51a3-9c48-198fc573010e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.3.25-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:2983eb9c-e814-5eb4-84a7-ef46563f5a53",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.3.25-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:e772b3de-c8b1-5909-9e1e-e66efa0cf941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 5.3.25-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:594c1cd1-2611-502e-be53-88624b7f58a6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.3.25-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:b352e5bc-ef06-50ff-816d-6bbf06ebd9ef",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:9c1355c2-9dcc-5796-931c-6c9a1d15e9bd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.25-tuxcare.10 of org.springframework:spring-test."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.10"
    }
  ]
}