{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ccc80d29-a716-5aba-8d25-5f50b5717d37",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-websocket",
      "version": "5.3.30-tuxcare.10",
      "purl": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:0ea416c4-d6f6-5d72-a517-a1bbc49859d4",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55cfb76d-2d55-546a-b306-92ad9233a5b0",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d0d92c4-4498-5197-80ab-f96f83a48715",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4dc1abd8-dd54-5926-8444-d1daecc535c0",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ef89902-ecdf-5608-a218-5dc6aedab320",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18ed45df-e29d-5495-ae25-af95569daf1a",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e023a605-837c-5ccf-afd2-8c7eaa8586e0",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d9f8ee3-dbe2-549e-9072-c5054ea65533",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7746010a-196b-540a-9931-7e1441f8b7b3",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbc7407b-d4d0-51c6-9ce4-2d474485a470",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:373b1fcd-5207-580d-aac3-528c9a29bbef",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:544a622b-015b-5e39-92f6-377330f99540",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da6fdf70-a0a8-585c-a381-5856c2c35bd7",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d6c305a-86d0-5a1c-9b3a-15b1047cd30d",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee310122-9adc-5263-8f8c-0544b7295588",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:097ba322-c711-5bda-baca-b08a870e0ac9",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c7bf604-cc05-5f1e-bf15-47c8274c0603",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29900b9e-8604-5c8c-8a09-0c7db4f05e7b",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af4e6623-b30f-5aaa-9139-8cf1ecb76a98",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed2756b1-2e3e-5431-8290-7e94aeb0c959",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fd04998-1a99-59f7-b3bc-2d8f9c11dcce",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e40ccd0-c353-5196-80cb-5944cdf1bc84",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.30-tuxcare.10 of org.springframework:spring-websocket. already_fixed \u2014 The target repository Spring Framework 5.3.30-tuxcare.3 already contains both fixes for CVE-2026-41840. The identical patches were previously backported by TuxCare as part of CVE-2026-22740 (commits 1a619adbfb and ee9443b0bc, merged May 2026). Both doOnDiscard handlers are present in the current code: PartGenerator.java releases data buffers on discard, and MultipartHttpMessageReader.java delet..."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee9dc503-fd20-5bff-bb06-0e0506d3b768",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e111046-897a-5c48-9666-025b37082937",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a86273d-b8f3-52c2-8888-3dea8e662eb2",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a7233e6-2b66-5a6e-9421-3d87c13b95f1",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa57560b-fdb9-50c6-9eec-7949c4f94e72",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aac84fa9-915d-5e65-893a-b0a11513210c",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:607415c9-f422-5a60-a6da-c310331423c0",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f130091c-85c8-5b55-8a82-7ce7572323d9",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba11da75-2613-5de7-9a07-cd5510d9e62e",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3985ba0e-bbb7-5691-8a5c-52f222d062fe",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdcc0aa3-a831-53a8-8d09-2b024520d5d3",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64922ac9-7d9e-5aef-8bbf-2e5f888422f7",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99616dd5-6546-5cbc-b314-6cb788107c9e",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d4b2a63-73bd-56d3-b3eb-1b8752502328",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0882e2b-969f-5200-a6fa-bd6b550cf091",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a689ad7-3d9e-5b03-bc19-67f219f82be3",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e809dd1-e541-56e2-b92e-15143bd12002",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf89c559-5542-5ba2-bd47-b9db4833aff0",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26ed063f-6808-5e7c-8a4d-15d0a9f3cb43",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c6e167b-5f28-53e9-acf2-b20cc873f2d3",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f752a0e2-6eb8-5224-9b50-efeeb05a0308",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:583cd66f-0df5-5aaa-8465-e72bd53d9636",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e2e853b-d6fd-5a6a-8d84-cc11f0dc56cc",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75ff5bcd-347e-533d-9490-49d23d8a3f03",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9146a83-820d-52f8-be82-13b0b53f1962",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15671b3d-9ece-5d24-a259-0189e7dd30f2",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b499f52-d7d0-5948-823f-8583c675f866",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd0acfd8-7413-5b2c-ba0a-2d0ff8c9d564",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.10"
    }
  ]
}