{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:75425aee-82fa-530f-a154-5cd1de324ab3",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7",
      "type": "library",
      "group": "org.springframework",
      "name": "spring",
      "version": "5.3.24-tuxcare.7",
      "purl": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:6715439f-5742-57ae-969d-2e8e4e15530d",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef17f36e-295f-5ebb-b068-2b375171563b",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f69a0a93-8e2f-581a-b80e-2aae86503a45",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:300f7ed8-c914-56d8-8889-57e85aa74a50",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fda87b57-cf81-5f2f-b800-64ea28e7e368",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc6b096d-6162-58f0-ad04-d4b4a9dc9e18",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9b26a5e-d890-5541-b66b-48757a541b24",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfd5a475-99da-5fee-85f9-dae3bfb3c3f8",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f91f61b-d42c-5bb8-9d02-f6120517477f",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97a42a69-bbe4-5a47-9129-b4240bd487e7",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:caffd916-505f-58f9-a018-d3afccfc0ec6",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fb94bf0-ebf7-5127-be7a-8155523dbb18",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d9129e7-91df-5053-9a41-b5d839acba46",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:425c6bef-b252-5291-9c0d-38d5c901a73d",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e58cce96-0fe7-5718-a6b4-746b15ac268f",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da499274-6041-59f9-8d71-aae50810fd78",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:debdc80b-a955-5da8-a117-76e5b999f521",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f49f4971-58cc-57a8-9238-d31600ba77d7",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c1c4d2d-1b7a-5750-80f7-2a5c1b239363",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aeb12fad-7c68-59dd-ae1d-2534f81c9dbf",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8f54bd3-0c5e-501e-b5ae-b9cc7efc9fb2",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c517487f-942b-581e-abc7-77133ba9f2cb",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ecff6141-8ee0-54b0-8a68-b07dd18e03ea",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67e48d32-0ce0-5ab5-83b0-1fb2cf62c093",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6af89ca4-5c5a-5230-b845-0b69cf47aaab",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.24-tuxcare.7 of org.springframework:spring. Patches already applied: 7052da453285658215efc1dd5ecb0d472fde2de1 (already in target via 2c11852775 'Backport CVE-2026-22740 to 5.3.24')"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8dd3c4ce-75eb-5719-bfc8-aaf3a1c732b5",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce818b87-50e2-562c-b20a-0689fc11711f",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:994ee41e-7fbf-54f9-bd88-ea85114c6898",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf508aab-1bd1-5999-9eee-0876f640665f",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ddaf708-5f10-53f8-a907-42c311302c4a",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:234ba58f-9d4d-5a7f-801b-c0f8dd156473",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f14e7c88-618d-5559-b8ea-025fca09db74",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62d23c27-7b51-5cc1-9e94-bd86e82cc896",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb2bb528-3915-5030-b44a-8858d480d728",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bcfbe7c0-51cf-535a-b82b-4da031b19085",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d8e53ad-5b2e-5d77-8ae1-3aecf4d2ff77",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11466198-e02e-541a-ac58-6a2a3b731c16",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0dd14f1d-b724-5465-94c5-2165f63f4e00",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f004a8e5-3653-50e8-9715-fc0f4a161407",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5dc18322-7467-5dfa-b285-30923d516308",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa6377e7-e2e5-52f2-b95e-70a8b0707eb1",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b8cdbe0-3931-5a53-8607-2752d9425a98",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:795cb10c-f321-59d4-84f9-6c40288ca44a",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:655850de-d880-5b80-8d75-87716876f479",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a466f5a2-1315-5ab4-bd41-24910a3a47d1",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75fb3a5a-0663-5e6e-9284-66937e7fb174",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ec1ae60-1155-5696-8a54-873fd48abbc7",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4fb4ead4-f667-5e38-ae35-70bae640ccaf",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c091defe-49c8-5b6f-b26b-10d3e2df594e",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1fb2f1d-3927-51bb-a7c1-7ad9093299ff",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd800807-40f8-5c2f-81b4-e890b98a0891",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de17d7d5-1b30-5da1-8ae0-f9073ed12a43",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1f4db80-c762-52c5-887d-83a4e74fc9da",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.24-tuxcare.7 of org.springframework:spring."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.7"
    }
  ]
}