{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6b702d6c-aced-5140-ad18-4beec2968188",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-test",
      "purl": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.4",
      "version": "5.3.33-tuxcare.4",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-test",
            "purl": "pkg:maven/org.springframework/spring-test@5.3.33",
            "type": "library",
            "group": "org.springframework",
            "version": "5.3.33"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:df351880-62be-5d2a-bf6c-26cfd93cf0b9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.3.33-tuxcare.4 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:cae15518-4bef-55f8-a3f3-31f4a936d1a0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.3.33-tuxcare.4 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:0eedfc5e-8ca2-5d83-83bd-3f0944d86c9f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.3.33-tuxcare.4 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:c1356021-60fd-53c1-a460-0e56476e9c12",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.3.33-tuxcare.4 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f713854e-ee12-5d01-9ee3-d6bc6a56d3b4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.3.33-tuxcare.4 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:af8e0800-de3f-5f7d-8638-1390faf98625",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.3.33-tuxcare.4 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:0885f18c-965a-59ef-b7a1-2f21e057cb86",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.3.33-tuxcare.4 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:8a74f887-34f6-5456-b109-515a48e557aa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.3.33-tuxcare.4 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ac039885-2655-59ce-88d0-fb0c22f5a46e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.3.33-tuxcare.4 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f81c8cc8-6c89-5df1-93dd-617f155a4866",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-1257 does not affect version 5.3.33-tuxcare.4 of org.springframework:spring-test. not_affected \u2014 The target Spring Framework 5.3.33 is NOT vulnerable to CVE-2018-1257. The vulnerability allowed attackers to craft STOMP subscription messages with malicious \"selector\" headers containing Spring EL expressions that caused ReDoS during parsing. The fix (commit ff2228fdaf by rstoyanchev@pivotal.io, April 2018) was already present in the upstream Spring Framework 5.3.33 release that TuxCare onboa...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:37d831bc-b40c-58b2-87aa-8a0125cb8180",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.3.33-tuxcare.4 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:95a80600-924c-5279-8705-a2716266aac3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.3.33-tuxcare.4 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d7f047cd-910d-58fa-89c5-b0bbf3a8c72d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.3.33-tuxcare.4 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:05605082-ed8f-5058-9f39-9328e47bb1e8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.3.33-tuxcare.4 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:dc92cce2-9561-597a-ab53-85d5afc72c72",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.3.33-tuxcare.4 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:93e5a8bd-5e7c-561a-a411-69f14961fc2b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 5.3.33-tuxcare.4 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ce9f6224-537e-56d6-804b-11885bf10679",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.3.33-tuxcare.4 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:28742d8d-ba8d-5635-997c-b1cc572df3ea",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.33-tuxcare.4 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7f32c9e8-4214-5af6-a67d-9fce06c1de08",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.33-tuxcare.4 of org.springframework:spring-test."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.4"
    }
  ]
}