{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e99d6ec4-65f1-5a72-aca5-b4485762640e",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-test",
      "purl": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.11",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.11",
      "version": "5.3.25-tuxcare.11",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-test",
            "purl": "pkg:maven/org.springframework/spring-test@5.3.25",
            "type": "library",
            "group": "org.springframework",
            "version": "5.3.25"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:084b7ba1-5844-5cf7-b826-05964cdc9a59",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.3.25-tuxcare.11 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:10e38f8e-a123-5d68-afb3-764d667d8752",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.3.25-tuxcare.11 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:ccd0a185-1274-50e1-90d9-aa24c126f6f7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.3.25-tuxcare.11 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:6366fc15-e524-539a-83dc-ce6718cbb650",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.3.25-tuxcare.11 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:d4515a0d-942e-539d-8d23-20cf486d1bf2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.3.25-tuxcare.11 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:0a6b9ba5-23b0-598d-96b6-f911a27489ff",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.3.25-tuxcare.11 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:24d2ca54-3c2c-5c07-a3e9-6e2478bbac73",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.3.25-tuxcare.11 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:99703405-5df5-5edf-b6a3-3286477f014a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.3.25-tuxcare.11 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:5ccc2bf3-c064-5e97-9740-4fa06b24d935",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.3.25-tuxcare.11 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:3696d4b2-006a-55ec-85c3-5834252e9984",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-1257 does not affect version 5.3.25-tuxcare.11 of org.springframework:spring-test. not_affected \u2014 CVE-2018-1257 ReDoS vulnerability is not present in Spring Framework 5.3.25. The fix (commit ff2228fdaf from April 2018) was already included in the upstream release. The vulnerable pattern - mandatory selector header parsing without ability to disable - has been replaced with configurable selector support where setSelectorHeaderName(null) disables the feature, and getSelectorExpression() check...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:79db576f-2328-565b-be26-183bb0799367",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.3.25-tuxcare.11 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:cdf15653-5b01-5ec3-874f-f399ad1a78d3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.3.25-tuxcare.11 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:129449cb-e9e7-5fbd-b384-715c97859379",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.3.25-tuxcare.11 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:9bb63f10-a1dd-59ba-b2bf-7b7a979c1d82",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.3.25-tuxcare.11 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:62094760-42cf-5599-98b5-936931b1b1a5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.3.25-tuxcare.11 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:cc0c36a5-9915-504b-bdca-35216e98d54e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 5.3.25-tuxcare.11 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:962c5f04-bacd-5b05-88e6-d20a9750e998",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.3.25-tuxcare.11 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:98985f89-5d1a-5777-b718-5afa52e1ceda",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.25-tuxcare.11 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.11"
        }
      ],
      "bom-ref": "urn:uuid:7cf179cb-29c9-597a-8b9c-969492ffc28a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.25-tuxcare.11 of org.springframework:spring-test."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-test@5.3.25-tuxcare.11"
    }
  ]
}