{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:04af6f3a-2e1a-5a84-bb10-f3785eb9bc6b",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-web",
      "version": "5.3.25-tuxcare.8",
      "purl": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:aaa5fb17-2535-59bf-a655-7ca319dee4a7",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44257ddb-89fe-5531-863d-45543fde017f",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:abc6608e-815c-5c09-8a99-8721eb716d24",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d764b4d4-142d-5292-8ea1-30928c2f8549",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65d8f406-174b-5e66-a708-132cf2aca066",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:064ead22-979e-5e0f-8974-40f79b99982c",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04c243cb-5194-5612-a82f-45bb7c05bc2c",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fda76d9d-4677-5150-a0f3-1f573b8c22af",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c538a85-332a-543c-88db-4e9fb6603d8b",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62e041eb-aba1-5614-b8a2-ae0b09804be0",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09ac1fa4-c84e-5f59-9553-6d2653327cf8",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2dfa125-9986-5a13-b668-d7e3762318d1",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:961882e6-e9e0-584f-ab59-8c0dcb5bc8b4",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd0981bc-1b05-505e-a3f7-d0aa43ddeb93",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92d7c62f-ac80-5782-aaa1-3bd6defbd230",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c42fa70-ec72-5cf2-85a8-1541a52c63dc",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32474331-c4bb-5aa2-ba66-d90166139854",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ad211ad-93c7-5702-abda-3f8a161434fa",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3c20b39-e59e-5cbd-b5e8-b46f6ef3d7b3",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:946a84df-624e-5651-ab4a-e03bff78a92c",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:591ccf11-bd6c-55c1-abeb-bc22427bc9e9",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd854412-7d83-5159-b1d0-e225b4fa3d79",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36da7ef0-1d31-5c99-9db8-4514d39b64ee",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8a5ddaa-9563-500a-9065-aa6baf842eff",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc55ce33-0282-5878-a6f8-3dfba926afb8",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2cf0fd2-59db-5cb9-bb84-f3d7206034b1",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed0c46c5-b054-5e45-b655-f32e8837c54d",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37cea54a-0006-54c0-993b-85bf6c9383af",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de92bbed-86ac-5e7e-a342-6936a9741191",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44463282-69e0-562d-a922-72d31f823325",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b92f5264-30ab-572d-a9ad-163c718f2903",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad4811f2-d993-5c5b-b885-acc121d31fd5",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.25-tuxcare.8 of org.springframework:spring-web. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fbf0a9d4-72c2-5424-b80d-37ea1500fa40",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:859fa4ea-6d80-563c-85f6-efbfbd0aeea5",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2faa274d-2589-5a2f-ac6e-103afc5100d5",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3312f45d-0cfc-5242-a9c4-aa78b7da66b2",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:610fed2a-bb6f-5326-a2b4-e7f339967de1",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c92cab1-96a4-5be5-939c-d695e9c750ea",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:428724ac-5321-5594-afcc-c5370b7cd45c",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f8dfe70-5777-588e-ad7f-51b4aa19d41c",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6054dc5a-5584-5300-8697-e707265400c6",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0cd963d3-6e0a-5233-ad4d-bcbdd2e34f45",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1de3b1fe-c0dc-5849-bb86-18779d53924e",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84272782-173c-5ac2-a5ca-4f5e835a2f17",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:318c2714-f23c-563f-ac54-d17381161aa8",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7036ff0-9dbb-5617-98ab-e48dd5c9cd7b",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46f79c1e-dea0-57a0-934c-6bf1cc8e980b",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:417197b3-2332-5002-8bd1-4a586549e6a0",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b44497cd-f4f4-5ef9-91f6-14a64f658d28",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eab9eb1a-b173-510a-89a6-73e2dafc3561",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c20d1127-fb5f-5f60-bd5c-51a97535a7b2",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57291cf7-5f74-55cd-955e-e98e12f3a41b",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68d88ad5-0aae-5ee8-9d46-a01e755bb77a",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.25-tuxcare.8 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@5.3.25-tuxcare.8"
    }
  ]
}