{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:14324311-7abf-55d0-872a-e45d0b9b4173",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-tx",
      "version": "5.3.30-tuxcare.9",
      "purl": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:8e0cca9e-ae5d-56b9-b8b3-09e37c19b2eb",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5cfe723e-a820-597d-ad33-185f79132fea",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a14ffcc-bcf2-51e2-806a-cc1e8157c24b",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e1ea841-c59f-5780-aeb0-4a7f1d8847b3",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f759dea-0637-5869-a73b-4e86314c6367",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:692c223c-812c-5014-ad83-39b2d2cd1222",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56d7f116-0f4a-50e8-ab0f-008a8a179515",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3a17eaf-09df-52f0-8c1a-98f2a43d693a",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d661e45c-b84b-5ba4-9064-2e45eac5c977",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b4adec3-ab78-5fd9-b1bb-288c13339b54",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e1c1142-9aaf-5883-9ca5-b8358ff40ca0",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e28cc973-a730-5780-9eec-ffbc80037100",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbedd271-cdc8-534e-ab82-e4d50192c46e",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb46b8b4-d1a6-59e6-9905-cfdc24278268",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a42a9ca-d675-5f95-963d-5e8eb101fb07",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:daa5b8ef-b6c7-5994-a517-c059133ffa15",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:117a5c8d-a13e-51ec-9b74-410c87d95bca",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:100a451e-7f21-5f62-bb38-bc3d8e62b302",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4cbce88-eb48-58b5-8750-5251129925f6",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:090dec69-2690-5974-b70c-83be14f4fd17",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1742f2a-7d6c-5a1c-8291-25416e213785",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:484f2c1b-2552-5589-970e-27df2794fea9",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.30-tuxcare.9 of org.springframework:spring-tx. already_fixed \u2014 The target repository Spring Framework 5.3.30-tuxcare.3 already contains both fixes for CVE-2026-41840. The identical patches were previously backported by TuxCare as part of CVE-2026-22740 (commits 1a619adbfb and ee9443b0bc, merged May 2026). Both doOnDiscard handlers are present in the current code: PartGenerator.java releases data buffers on discard, and MultipartHttpMessageReader.java delet..."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a57867e-bc09-546c-a1d1-1eeb753be1f9",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7e96493-4117-57ec-97fa-daa39b1df18a",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05b9f3fd-35f5-5836-a17f-eddd04a3470d",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c620d98-f172-57b2-8164-3a934626e15e",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8dfde2fc-838a-510d-be06-2ea2c5b1e9cf",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57f4e683-d080-5058-bc2b-54e608eb7f93",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47817d9f-e56e-5668-b7ae-b20d25db20c7",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41b75c76-23a1-5048-8f29-f4f7580aa984",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13d798c0-0f71-5836-ba5d-83ec1ee2374c",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f38078bd-b1aa-569f-87b5-b11120bc54a2",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39c50b68-a25e-5529-a86a-2efcf2528817",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04e9376e-ab4a-5a02-ad55-5963390dfa59",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f19f6437-f9c1-56aa-bf1b-a8a1a870a4b8",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb8f3a37-4323-5ff8-98bc-6a24fa0c8f40",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f99a5f1-cb7e-5afc-82f4-634c9b2964ab",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a8972af-4d87-5d03-bc53-a9218a8468ba",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74fca44a-5dfe-5ff6-9245-ad14f586fe3d",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc1e437f-aa36-52d6-b784-c45c53d5fd82",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1889aa8c-52e0-5852-a167-96866df19080",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b6ed121-1d61-5969-9945-ee61914708ad",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2069f5ad-78dc-57c1-bb4d-e3035d78c517",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57e8c5c4-008e-564a-87d7-efacdb69a2fd",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:941a09ec-4d68-565c-bf63-5cc6ccb860f5",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35b0165f-d2be-59d3-9cea-fa1e87de0d68",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51e18dba-d8fe-536e-adce-0da602fb91f8",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb1f0d96-4fac-51a6-914f-fd1324ac3fd6",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d5dffa4-2719-5496-90b5-c531f06a4acb",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0590c5a9-fd6b-5da7-94c0-837892b18e9a",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.30-tuxcare.9 of org.springframework:spring-tx."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.9"
    }
  ]
}