{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5b65826c-61c9-59e2-9f93-9f1ec15b44cf",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-websocket",
      "version": "5.3.30-tuxcare.9",
      "purl": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:592ba82b-ac27-5c4f-87c0-ded01618991c",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1037e98-3356-5118-8cf5-e7c34ec58385",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebf1d43e-5387-5f84-adbd-a994de15022e",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00145b25-fc37-5c44-bcc2-a11bd8b8751f",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af2e0380-ec38-5ad2-8734-11062b089511",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2683d742-d004-5d42-873b-69696470f3d9",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a79d4c90-fb74-5268-bf16-b02f95a7e2d7",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c1f9fce-66b2-5151-8ba8-4f5406a352eb",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:338c6c96-7142-5d48-add0-94fea62d2074",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9441b8e3-9c43-5e44-9aad-efba992917af",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f66d92f3-e8ff-5ab1-8396-e40ecfcfcb93",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af2754a6-6b0f-5a67-afd4-b788b34be43e",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5736423-2632-5aa5-aefc-6a13e51a4f1c",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebf98343-4750-5a75-9418-44199431ac24",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82e23dc9-66d0-58c9-a19d-15e7e559aa29",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2244bc1-8835-505a-b1e0-c49807127b12",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa1bbb31-ea42-5bb9-a92b-59deb4bf700a",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5728969-d9ff-5ea8-896b-9af1589ea2af",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a59dfeda-b697-5afc-baf4-d8de362b7f74",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:462444b1-5141-53b9-a49c-f25858e49b42",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0584b0f-1e95-5497-9827-a748654bc1e6",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ede8af2-2f95-569f-88c1-c12831512caf",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.30-tuxcare.9 of org.springframework:spring-websocket. already_fixed \u2014 The target repository Spring Framework 5.3.30-tuxcare.3 already contains both fixes for CVE-2026-41840. The identical patches were previously backported by TuxCare as part of CVE-2026-22740 (commits 1a619adbfb and ee9443b0bc, merged May 2026). Both doOnDiscard handlers are present in the current code: PartGenerator.java releases data buffers on discard, and MultipartHttpMessageReader.java delet..."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf9622e3-1b2f-57ed-9fd4-a2cb0ece137a",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31f18acc-ebd1-5cf7-9c07-be2d539468df",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9914c19-76c7-57ce-8d1a-a185a9d97e60",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e51ce697-cdd8-59a8-a109-9f8923ac06c2",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:077a3dd5-e48e-57ac-9120-c2599a21d73f",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0434e3b-e6e2-5a33-b4aa-1af7ed3b6b45",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6dc67b2-012e-5b4b-a09e-e6dd191cba80",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe4d43bd-77c9-5819-b4a3-484650036084",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2655d49a-3650-5595-9f78-549098cba8d0",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ef82efc-d92e-5a7a-99c4-b6a8f20ef471",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:886c3ce3-f22b-5c97-b7d7-611e91d13eea",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e43bebe-a5d6-5f9a-b2db-3da787d200de",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5194e876-6a13-5718-99b4-9df129435c15",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de4eb031-0077-5630-84d2-9a102460ffd6",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a450aa7-8145-5145-87ea-8d112776cf06",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5615202-5165-5a68-ba26-09a807c37e3b",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc1df364-8ad6-5cc2-9df6-ae4571403209",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5f05e16-403c-5834-b231-be169b43c6a5",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:350996dc-92f7-5cf2-92a6-48e367dff0f8",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1826b9d-ffc6-5b82-a1bf-8ae761f5f324",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:518994d4-99a8-5fba-8830-e1067e2779bb",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d002d7d-7ed0-5a73-990e-1f8285655fbb",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:015b92b7-b887-5fa7-95f9-ecc741797b70",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57e2c7f5-199c-5a0f-8f88-a614df650ff9",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3eba43e-ff44-51e2-a143-11aeb9d3cf1f",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:692139a3-a0d5-563a-8b56-2b6991b25f01",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1cef3b47-a72c-555c-8f74-2f7045c19246",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4df2b81b-8d38-5f05-9900-06b3ae38337a",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.30-tuxcare.9 of org.springframework:spring-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-websocket@5.3.30-tuxcare.9"
    }
  ]
}