{
  "@id": "urn:uuid:c2518934-e8c1-49ce-9c09-89e5ea4abdbd",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 40,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-31T03:44:58.208288+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-30T13:00:26.830408+00:00",
      "status_notes": "Vulnerability CVE-2009-1190 does not affect version 5.3.33-tuxcare.2 of org.springframework:spring-expression. not_affected \u2014 Spring Framework 5.3.33 is not affected by CVE-2009-1190. The vulnerability requires deserializing untrusted data containing malicious regex patterns, which triggers CPU exhaustion via Pattern.compile(). The upstream vendor (Spring) mitigated this by deprecating all serialization-based remoting (HttpInvoker, RMI) in Spring 5.3.0 (July 2020) with explicit warnings against exposing these endpoint...",
      "vulnerability": {
        "name": "CVE-2009-1190"
      },
      "impact_statement": "not_affected \u2014 Spring Framework 5.3.33 is not affected by CVE-2009-1190. The vulnerability requires deserializing untrusted data containing malicious regex patterns, which triggers CPU exhaustion via Pattern.compile(). The upstream vendor (Spring) mitigated this by deprecating all serialization-based remoting (HttpInvoker, RMI) in Spring 5.3.0 (July 2020) with explicit warnings against exposing these endpoint..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T21:27:55.132553+00:00",
      "status_notes": "Vulnerability CVE-2011-2730 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression.",
      "vulnerability": {
        "name": "CVE-2011-2730"
      },
      "action_statement": "Vulnerability CVE-2011-2730 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-29T02:23:11.597840+00:00",
      "status_notes": "Vulnerability CVE-2011-2894 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression.",
      "vulnerability": {
        "name": "CVE-2011-2894"
      },
      "action_statement": "Vulnerability CVE-2011-2894 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T23:41:42.084809+00:00",
      "status_notes": "Vulnerability CVE-2014-3578 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression.",
      "vulnerability": {
        "name": "CVE-2014-3578"
      },
      "action_statement": "Vulnerability CVE-2014-3578 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-29T13:39:01.836668+00:00",
      "status_notes": "Vulnerability CVE-2015-0201 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression.",
      "vulnerability": {
        "name": "CVE-2015-0201"
      },
      "action_statement": "Vulnerability CVE-2015-0201 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T21:27:55.132553+00:00",
      "status_notes": "Vulnerability CVE-2015-5211 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression.",
      "vulnerability": {
        "name": "CVE-2015-5211"
      },
      "action_statement": "Vulnerability CVE-2015-5211 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T21:27:55.132553+00:00",
      "status_notes": "Vulnerability CVE-2016-5007 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression.",
      "vulnerability": {
        "name": "CVE-2016-5007"
      },
      "action_statement": "Vulnerability CVE-2016-5007 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2018-11040 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression.",
      "vulnerability": {
        "name": "CVE-2018-11040"
      },
      "action_statement": "Vulnerability CVE-2018-11040 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-29T00:44:47.675175+00:00",
      "status_notes": "Vulnerability CVE-2018-1199 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression.",
      "vulnerability": {
        "name": "CVE-2018-1199"
      },
      "action_statement": "Vulnerability CVE-2018-1199 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-30T10:20:00.109102+00:00",
      "status_notes": "Vulnerability CVE-2018-1257 does not affect version 5.3.33-tuxcare.2 of org.springframework:spring-expression. not_affected \u2014 The target Spring Framework 5.3.33 is NOT vulnerable to CVE-2018-1257. The vulnerability allowed attackers to craft STOMP subscription messages with malicious \"selector\" headers containing Spring EL expressions that caused ReDoS during parsing. The fix (commit ff2228fdaf by rstoyanchev@pivotal.io, April 2018) was already present in the upstream Spring Framework 5.3.33 release that TuxCare onboa...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2018-1257"
      },
      "impact_statement": "not_affected \u2014 The target Spring Framework 5.3.33 is NOT vulnerable to CVE-2018-1257. The vulnerability allowed attackers to craft STOMP subscription messages with malicious \"selector\" headers containing Spring EL expressions that caused ReDoS during parsing. The fix (commit ff2228fdaf by rstoyanchev@pivotal.io, April 2018) was already present in the upstream Spring Framework 5.3.33 release that TuxCare onboa..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-29T02:48:12.612717+00:00",
      "status_notes": "Vulnerability CVE-2018-1258 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression.",
      "vulnerability": {
        "name": "CVE-2018-1258"
      },
      "action_statement": "Vulnerability CVE-2018-1258 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-30T19:09:00.107947+00:00",
      "status_notes": "Vulnerability CVE-2018-1271 does not affect version 5.3.33-tuxcare.2 of org.springframework:spring-expression. not_affected \u2014 CVE-2018-1271 directory traversal vulnerability is NOT present in Spring Framework 5.3.33. The upstream fix (commit 0e28bee0f1 by Rossen Stoyanchev) was already included in the upstream 5.3.33 release before TuxCare onboarded it. The target contains complete defense mechanisms: processPath() normalizes backslashes to forward slashes and removes duplicate slashes; isInvalidEncodedPath() URL-deco...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2018-1271"
      },
      "impact_statement": "not_affected \u2014 CVE-2018-1271 directory traversal vulnerability is NOT present in Spring Framework 5.3.33. The upstream fix (commit 0e28bee0f1 by Rossen Stoyanchev) was already included in the upstream 5.3.33 release before TuxCare onboarded it. The target contains complete defense mechanisms: processPath() normalizes backslashes to forward slashes and removes duplicate slashes; isInvalidEncodedPath() URL-deco..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T21:22:31.131193+00:00",
      "status_notes": "Vulnerability CVE-2018-1272 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression.",
      "vulnerability": {
        "name": "CVE-2018-1272"
      },
      "action_statement": "Vulnerability CVE-2018-1272 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T21:58:36.804623+00:00",
      "status_notes": "Vulnerability CVE-2018-15756 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression.",
      "vulnerability": {
        "name": "CVE-2018-15756"
      },
      "action_statement": "Vulnerability CVE-2018-15756 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:31:54.607962+00:00",
      "status_notes": "Vulnerability CVE-2021-22060 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression.",
      "vulnerability": {
        "name": "CVE-2021-22060"
      },
      "action_statement": "Vulnerability CVE-2021-22060 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:31:54.607962+00:00",
      "status_notes": "Vulnerability CVE-2021-22096 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression.",
      "vulnerability": {
        "name": "CVE-2021-22096"
      },
      "action_statement": "Vulnerability CVE-2021-22096 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-31T03:17:31.624279+00:00",
      "status_notes": "Vulnerability CVE-2022-22950 does not affect version 5.3.33-tuxcare.2 of org.springframework:spring-expression. not_affected \u2014 CVE-2022-22950 is NOT present in Spring Framework 5.3.33. The vulnerability affects versions 5.3.0-5.3.16, and the fix was introduced in upstream version 5.3.17 (commit 83ac659158). The target version 5.3.33 already contains the upstream fix that limits array element creation to 256K elements, preventing the DoS condition. The fix was shipped in the upstream release when TuxCare onboarded versi...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2022-22950"
      },
      "impact_statement": "not_affected \u2014 CVE-2022-22950 is NOT present in Spring Framework 5.3.33. The vulnerability affects versions 5.3.0-5.3.16, and the fix was introduced in upstream version 5.3.17 (commit 83ac659158). The target version 5.3.33 already contains the upstream fix that limits array element creation to 256K elements, preventing the DoS condition. The fix was shipped in the upstream release when TuxCare onboarded versi..."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-31T03:44:58.208288+00:00",
      "status_notes": "Vulnerability CVE-2023-20861 does not affect version 5.3.33-tuxcare.2 of org.springframework:spring-expression. not_affected \u2014 CVE-2023-20861 affects Spring Framework versions 5.3.0-5.3.25 due to insufficient regex pattern caching in the SpEL matches operator, which could cause DoS through repeated pattern compilation. The target version 5.3.33 is NOT vulnerable because the fix (commit 430fc25aca by Sam Brannen) was already present in the upstream Spring Framework 5.3.26 release. The fix moves the pattern cache from in...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2023-20861"
      },
      "impact_statement": "not_affected \u2014 CVE-2023-20861 affects Spring Framework versions 5.3.0-5.3.25 due to insufficient regex pattern caching in the SpEL matches operator, which could cause DoS through repeated pattern compilation. The target version 5.3.33 is NOT vulnerable because the fix (commit 430fc25aca by Sam Brannen) was already present in the upstream Spring Framework 5.3.26 release. The fix moves the pattern cache from in..."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-31T01:38:43.676707+00:00",
      "status_notes": "Vulnerability CVE-2023-20863 does not affect version 5.3.33-tuxcare.2 of org.springframework:spring-expression. not_affected \u2014 Target version 5.3.33 is not affected by CVE-2023-20863. The upstream Spring Framework fix for SpEL expression length limiting (restricting expressions to 10,000 characters) was already present in the upstream 5.3.33 release when TuxCare onboarded it. The CVE affects versions prior to 5.2.24, 5.3.27, and 6.0.8; since 5.3.33 > 5.3.27, the fix was already incorporated upstream. The fix commit (eb...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2023-20863"
      },
      "impact_statement": "not_affected \u2014 Target version 5.3.33 is not affected by CVE-2023-20863. The upstream Spring Framework fix for SpEL expression length limiting (restricting expressions to 10,000 characters) was already present in the upstream 5.3.33 release when TuxCare onboarded it. The CVE affects versions prior to 5.2.24, 5.3.27, and 6.0.8; since 5.3.33 > 5.3.27, the fix was already incorporated upstream. The fix commit (eb..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-29T03:39:22.988337+00:00",
      "status_notes": "Vulnerability CVE-2024-22233 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression.",
      "vulnerability": {
        "name": "CVE-2024-22233"
      },
      "action_statement": "Vulnerability CVE-2024-22233 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-29T15:06:00.746750+00:00",
      "status_notes": "Vulnerability CVE-2024-38808 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression.",
      "vulnerability": {
        "name": "CVE-2024-38808"
      },
      "action_statement": "Vulnerability CVE-2024-38808 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-29T15:06:00.746750+00:00",
      "status_notes": "Vulnerability CVE-2025-41249 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-expression.",
      "vulnerability": {
        "name": "CVE-2025-41249"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-29T15:06:00.746750+00:00",
      "status_notes": "Vulnerability CVE-2026-41848 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-expression.",
      "vulnerability": {
        "name": "CVE-2026-41848"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-29T15:06:00.746750+00:00",
      "status_notes": "Vulnerability CVE-2026-41849 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression.",
      "vulnerability": {
        "name": "CVE-2026-41849"
      },
      "action_statement": "Vulnerability CVE-2026-41849 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-27T10:31:24.194967+00:00",
      "status_notes": "Vulnerability CVE-2026-41850 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression, and is fixed in 5.3.33-tuxcare.4.",
      "vulnerability": {
        "name": "CVE-2026-41850"
      },
      "action_statement": "Vulnerability CVE-2026-41850 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression, and is fixed in 5.3.33-tuxcare.4."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-21T16:45:51.617996+00:00",
      "status_notes": "Vulnerability CVE-2026-41851 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression, and is fixed in 5.3.33-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-41851"
      },
      "action_statement": "Vulnerability CVE-2026-41851 affects version 5.3.33-tuxcare.2 of org.springframework:spring-expression, and is fixed in 5.3.33-tuxcare.3."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-29T15:06:00.746750+00:00",
      "status_notes": "Vulnerability CVE-2026-41852 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-expression.",
      "vulnerability": {
        "name": "CVE-2026-41852"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-29T15:06:00.746750+00:00",
      "status_notes": "Vulnerability CVE-2026-47886 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-expression.",
      "vulnerability": {
        "name": "CVE-2026-47886"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.33-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-29T15:06:00.746750+00:00",
      "status_notes": "Vulnerability CVE-2026-59283 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-expression.",
      "vulnerability": {
        "name": "CVE-2026-59283"
      }
    }
  ]
}