{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:005e9e3c-643e-51d4-8fe8-4ef1a4d2ffb5",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-webflux",
      "version": "5.3.25-tuxcare.8",
      "purl": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:a14484c3-ffa4-5ed3-ad96-550849abe646",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de42215d-028f-59c7-9ef6-cb4f7521209f",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:718e171b-7790-5727-8480-005ae267c0d7",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:438adfb2-c0f1-51eb-809d-37ac6c014698",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:342b1387-369e-548c-8d0e-ec87f0271b96",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba425ff5-7a18-51b3-b22f-762dd261c755",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:403b498a-d514-579c-ae16-1838ea223cf7",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2cc49e24-31a7-58e8-be6d-5754e1580ac0",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6eb0bae3-050e-5ea6-993c-7f1e7d0e0200",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e764a25-d981-55cb-af95-35d713c487d9",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5bca9668-462e-58cd-9f65-605444933a05",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:146a63db-6167-5960-a86e-699065c6d984",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:767689ea-93ef-533c-b238-2b196a9046ec",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e5ba955-bab7-514f-b5d1-204482d6492c",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d155e25-e6a4-523c-b629-6907b799a52f",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40cf5575-4459-59dc-8f44-4bd3f95f51d8",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb171fdd-b526-53cb-ac86-504460e0281e",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9bdd847-9824-5f87-97a2-366eb191f27b",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06f2cb06-0e75-53ab-804c-76fce0c3eb56",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:422160d0-371d-5e5f-888f-0b1946cb1c8c",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ccff07fa-ec48-5d3b-a61f-af9bdba4fe81",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f6ef289-740f-5a6b-ba36-216dfee5c8e5",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:551555a2-db97-5ce6-b166-2f5d8ea20517",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65dffe4b-77c9-5bef-8bdc-939c7d5482a9",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:186147e6-5482-5eea-86bd-48d382861320",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8fcd61e-f274-541d-9224-c53ea06f7a7b",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dec4907b-a6cf-573e-a3d9-cd25d3887d56",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb74d5ef-d3f1-58c1-8906-4cfbe0b48528",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14f97544-91e8-520c-a38b-c2b0c18d71de",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac7acab3-4e03-5727-ad8c-4ecd81c21b2f",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7cb1212-971a-5d9b-9516-28530399074b",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c5b2f72-c772-580a-a8d5-cd01f1fca2ac",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.25-tuxcare.8 of org.springframework:spring-webflux. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4bcd55a1-c525-5fe1-95c6-7301aacc6b43",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:acfa5767-8256-502d-ac2c-a7396cb46d90",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6043cb59-a7df-5a24-8c82-bb48f82428d0",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4621ede1-e328-5117-8f97-2315d66745d6",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:abde670e-ad87-5869-bb98-235dcd7ae112",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6f8710b-c511-5e85-8430-14e52d05533a",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38d8ee48-a2b7-5dc5-ad42-26228b020567",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:834c6807-72a7-5b50-b621-f224dfc8540b",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:adfa3434-72e0-582e-8581-5e361fddc7e7",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f6d161e-80a5-5d78-8417-c768c3a57389",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe4189a4-09d1-5ff7-b2ca-bfe0ac4111a9",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:647b441b-f7e2-5623-b212-49e7f2e7a256",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb298d8d-5900-59c1-9cfc-64c258f8dfd9",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c17ecf3-af01-5dfa-8bdc-e8086038817e",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a275ae14-954a-5942-89ab-8797475a41df",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c3fae5c-8c12-5ed2-a017-4d3a49590591",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d937c41-2f9b-53a7-9fc7-9c711460dd06",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab181b42-cb09-560b-85c3-bd458bc842e6",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05c89f6b-c11f-5129-bfbf-0b8631918520",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d26f8b18-446b-5384-ad4e-313b28976ee4",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9aa5707-6c6f-57a1-969f-12512c82f8d0",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.25-tuxcare.8 of org.springframework:spring-webflux."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-webflux@5.3.25-tuxcare.8"
    }
  ]
}