{
  "@id": "urn:uuid:8c91d80b-1ba9-4062-933a-b773d465d601",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 27,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-29T11:38:21.198900+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T21:27:55.132553+00:00",
      "status_notes": "Vulnerability CVE-2009-1190 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2009-1190"
      },
      "action_statement": "Vulnerability CVE-2009-1190 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T21:34:36.358672+00:00",
      "status_notes": "Vulnerability CVE-2010-1622 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2010-1622"
      },
      "action_statement": "Vulnerability CVE-2010-1622 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T21:30:41.069534+00:00",
      "status_notes": "Vulnerability CVE-2011-2730 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2011-2730"
      },
      "action_statement": "Vulnerability CVE-2011-2730 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-29T02:23:11.597840+00:00",
      "status_notes": "Vulnerability CVE-2011-2894 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2011-2894"
      },
      "action_statement": "Vulnerability CVE-2011-2894 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T21:45:22.088279+00:00",
      "status_notes": "Vulnerability CVE-2013-4152 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2013-4152"
      },
      "action_statement": "Vulnerability CVE-2013-4152 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T21:27:55.132553+00:00",
      "status_notes": "Vulnerability CVE-2013-6429 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2013-6429"
      },
      "action_statement": "Vulnerability CVE-2013-6429 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T21:25:11.687376+00:00",
      "status_notes": "Vulnerability CVE-2013-6430 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2013-6430"
      },
      "action_statement": "Vulnerability CVE-2013-6430 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T21:45:22.088279+00:00",
      "status_notes": "Vulnerability CVE-2013-7315 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2013-7315"
      },
      "action_statement": "Vulnerability CVE-2013-7315 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T21:22:31.131193+00:00",
      "status_notes": "Vulnerability CVE-2014-0054 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2014-0054"
      },
      "action_statement": "Vulnerability CVE-2014-0054 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T21:48:07.176896+00:00",
      "status_notes": "Vulnerability CVE-2014-0225 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2014-0225"
      },
      "action_statement": "Vulnerability CVE-2014-0225 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T21:45:22.088279+00:00",
      "status_notes": "Vulnerability CVE-2014-1904 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2014-1904"
      },
      "action_statement": "Vulnerability CVE-2014-1904 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T23:41:42.084809+00:00",
      "status_notes": "Vulnerability CVE-2014-3578 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2014-3578"
      },
      "action_statement": "Vulnerability CVE-2014-3578 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T21:42:13.036680+00:00",
      "status_notes": "Vulnerability CVE-2014-3625 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2014-3625"
      },
      "action_statement": "Vulnerability CVE-2014-3625 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T21:22:31.131193+00:00",
      "status_notes": "Vulnerability CVE-2015-3192 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2015-3192"
      },
      "action_statement": "Vulnerability CVE-2015-3192 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T21:27:55.132553+00:00",
      "status_notes": "Vulnerability CVE-2015-5211 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2015-5211"
      },
      "action_statement": "Vulnerability CVE-2015-5211 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2016-1000027 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required",
      "vulnerability": {
        "name": "CVE-2016-1000027"
      },
      "action_statement": "Vulnerability CVE-2016-1000027 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required"
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T21:27:55.132553+00:00",
      "status_notes": "Vulnerability CVE-2016-5007 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2016-5007"
      },
      "action_statement": "Vulnerability CVE-2016-5007 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T21:20:09.538096+00:00",
      "status_notes": "Vulnerability CVE-2016-9878 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2016-9878"
      },
      "action_statement": "Vulnerability CVE-2016-9878 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-29T00:44:47.675175+00:00",
      "status_notes": "Vulnerability CVE-2018-11039 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2018-11039"
      },
      "action_statement": "Vulnerability CVE-2018-11039 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2018-11040 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2018-11040"
      },
      "action_statement": "Vulnerability CVE-2018-11040 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-29T00:44:47.675175+00:00",
      "status_notes": "Vulnerability CVE-2018-1199 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2018-1199"
      },
      "action_statement": "Vulnerability CVE-2018-1199 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T21:25:11.687376+00:00",
      "status_notes": "Vulnerability CVE-2018-1257 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2018-1257"
      },
      "action_statement": "Vulnerability CVE-2018-1257 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-29T02:48:12.612717+00:00",
      "status_notes": "Vulnerability CVE-2018-1258 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2018-1258"
      },
      "action_statement": "Vulnerability CVE-2018-1258 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-29T00:16:38.201074+00:00",
      "status_notes": "Vulnerability CVE-2018-1270 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2018-1270"
      },
      "action_statement": "Vulnerability CVE-2018-1270 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T21:30:41.069534+00:00",
      "status_notes": "Vulnerability CVE-2018-1271 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2018-1271"
      },
      "action_statement": "Vulnerability CVE-2018-1271 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T21:22:31.131193+00:00",
      "status_notes": "Vulnerability CVE-2018-1272 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2018-1272"
      },
      "action_statement": "Vulnerability CVE-2018-1272 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-29T00:16:38.201074+00:00",
      "status_notes": "Vulnerability CVE-2018-1275 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2018-1275"
      },
      "action_statement": "Vulnerability CVE-2018-1275 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T22:02:19.515243+00:00",
      "status_notes": "Vulnerability CVE-2018-15756 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2018-15756"
      },
      "action_statement": "Vulnerability CVE-2018-15756 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-29T03:58:30.759519+00:00",
      "status_notes": "Vulnerability CVE-2020-5397 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2020-5397"
      },
      "action_statement": "Vulnerability CVE-2020-5397 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T23:49:59.024011+00:00",
      "status_notes": "Vulnerability CVE-2020-5398 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2020-5398"
      },
      "action_statement": "Vulnerability CVE-2020-5398 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T21:34:36.358672+00:00",
      "status_notes": "Vulnerability CVE-2020-5421 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2020-5421"
      },
      "action_statement": "Vulnerability CVE-2020-5421 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T22:31:54.607962+00:00",
      "status_notes": "Vulnerability CVE-2021-22060 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2021-22060"
      },
      "action_statement": "Vulnerability CVE-2021-22060 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T22:31:54.607962+00:00",
      "status_notes": "Vulnerability CVE-2021-22096 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2021-22096"
      },
      "action_statement": "Vulnerability CVE-2021-22096 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-29T00:44:47.675175+00:00",
      "status_notes": "Vulnerability CVE-2021-22118 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2021-22118"
      },
      "action_statement": "Vulnerability CVE-2021-22118 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T21:42:13.036680+00:00",
      "status_notes": "Vulnerability CVE-2022-22950 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2022-22950"
      },
      "action_statement": "Vulnerability CVE-2022-22950 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T21:20:09.538096+00:00",
      "status_notes": "Vulnerability CVE-2022-22965 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2022-22965"
      },
      "action_statement": "Vulnerability CVE-2022-22965 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T21:42:13.036680+00:00",
      "status_notes": "Vulnerability CVE-2022-22968 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2022-22968"
      },
      "action_statement": "Vulnerability CVE-2022-22968 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2022-22970 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2022-22970"
      },
      "action_statement": "Vulnerability CVE-2022-22970 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2022-22971 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2022-22971"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2023-20860 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2023-20860"
      },
      "action_statement": "Vulnerability CVE-2023-20860 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2023-20861 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2023-20861"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2023-20863 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2023-20863"
      },
      "action_statement": "Vulnerability CVE-2023-20863 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-29T02:36:49.908127+00:00",
      "status_notes": "Vulnerability CVE-2023-34053 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2023-34053"
      },
      "action_statement": "Vulnerability CVE-2023-34053 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-29T03:39:22.988337+00:00",
      "status_notes": "Vulnerability CVE-2024-22233 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2024-22233"
      },
      "action_statement": "Vulnerability CVE-2024-22233 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2024-22243 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2024-22243"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2024-22259 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2024-22259"
      },
      "action_statement": "Vulnerability CVE-2024-22259 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2024-22262 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2024-22262"
      },
      "action_statement": "Vulnerability CVE-2024-22262 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2024-38808 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2024-38808"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2024-38809 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2024-38809"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2024-38816 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2024-38816"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2024-38819 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2024-38819"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2024-38820 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2024-38820"
      },
      "action_statement": "Vulnerability CVE-2024-38820 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2024-38828 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2024-38828"
      },
      "action_statement": "Vulnerability CVE-2024-38828 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2025-22233 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2025-22233"
      },
      "action_statement": "Vulnerability CVE-2025-22233 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-29T03:58:30.759519+00:00",
      "status_notes": "Vulnerability CVE-2025-41234 does not affect version 5.3.19-tuxcare.3 of org.springframework:spring-jcl. not_affected \u2014 Spring Framework 5.3.19 is NOT vulnerable to CVE-2025-41234. The vulnerability exists only in versions 6.0+ where commit 58fbf60d2d (Feb 2023) introduced dual-parameter Content-Disposition output with a flawed quoted-printable encoder. Version 5.3.19 uses a fundamentally different architecture: it produces ONLY the RFC 5987-encoded `filename*=` parameter (not the vulnerable quoted-printable `fi...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2025-41234"
      },
      "impact_statement": "not_affected \u2014 Spring Framework 5.3.19 is NOT vulnerable to CVE-2025-41234. The vulnerability exists only in versions 6.0+ where commit 58fbf60d2d (Feb 2023) introduced dual-parameter Content-Disposition output with a flawed quoted-printable encoder. Version 5.3.19 uses a fundamentally different architecture: it produces ONLY the RFC 5987-encoded `filename*=` parameter (not the vulnerable quoted-printable `fi..."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2025-41242 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2025-41242"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2025-41249 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2025-41249"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2025-41254 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2025-41254"
      },
      "action_statement": "Vulnerability CVE-2025-41254 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-22735 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-22735"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-22737 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-22737"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-22740 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-22740"
      },
      "action_statement": "Vulnerability CVE-2026-22740 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-22741 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-22741"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-22745 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-22745"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-41838 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-41838"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-41839 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-41839"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-41840 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-41840"
      },
      "action_statement": "Vulnerability CVE-2026-41840 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-41841 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-41841"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-41842 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-41842"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:55:00.109232+00:00",
      "status_notes": "Vulnerability CVE-2026-41843 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-41843"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-41844 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-41844"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-41845 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-41845"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-41846 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-41846"
      },
      "action_statement": "Vulnerability CVE-2026-41846 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-41847 does not affect version 5.3.19-tuxcare.3 of org.springframework:spring-jcl. not_affected \u2014 Spring Framework 5.3.19 is not affected by CVE-2026-41847. The vulnerability (filter parameter shadowing in Kotlin Router DSL) was fixed upstream in April 2021 by contributor shindong.lee@riiid.co (commit 07ba95739b). This fix was included in Spring 5.3.19 when it was released in April 2022, over a year after the fix. TuxCare onboarded the already-fixed upstream version in September 2026. Both ...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-41847"
      },
      "impact_statement": "not_affected \u2014 Spring Framework 5.3.19 is not affected by CVE-2026-41847. The vulnerability (filter parameter shadowing in Kotlin Router DSL) was fixed upstream in April 2021 by contributor shindong.lee@riiid.co (commit 07ba95739b). This fix was included in Spring 5.3.19 when it was released in April 2022, over a year after the fix. TuxCare onboarded the already-fixed upstream version in September 2026. Both ..."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-41848 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-41848"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-41849 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-41849"
      },
      "action_statement": "Vulnerability CVE-2026-41849 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:55:21.433196+00:00",
      "status_notes": "Vulnerability CVE-2026-41850 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-41850"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-41851 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-41851"
      },
      "action_statement": "Vulnerability CVE-2026-41851 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-41852 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-41852"
      },
      "action_statement": "Vulnerability CVE-2026-41852 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-41853 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-41853"
      },
      "action_statement": "Vulnerability CVE-2026-41853 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-41854 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-41854"
      },
      "action_statement": "Vulnerability CVE-2026-41854 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-41855 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-41855"
      }
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-29T11:38:21.198900+00:00",
      "status_notes": "Vulnerability CVE-2026-47883 does not affect version 5.3.19-tuxcare.3 of org.springframework:spring-jcl. not_affected \u2014 Spring Framework 5.3.19 is not affected by CVE-2026-47883. The vulnerable component UrlHandlerFilter does not exist in this version - it was introduced later in Spring Framework 6.2.0-M2 (May 2024, commit edb6bb717d). The target version predates this feature by a significant margin. No alternative code path in 5.3.19 implements the same vulnerability pattern of reading request URIs with double-...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-47883"
      },
      "impact_statement": "not_affected \u2014 Spring Framework 5.3.19 is not affected by CVE-2026-47883. The vulnerable component UrlHandlerFilter does not exist in this version - it was introduced later in Spring Framework 6.2.0-M2 (May 2024, commit edb6bb717d). The target version predates this feature by a significant margin. No alternative code path in 5.3.19 implements the same vulnerability pattern of reading request URIs with double-..."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-47884 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-47884"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T18:40:55.741562+00:00",
      "status_notes": "Vulnerability CVE-2026-47885 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-47885"
      },
      "action_statement": "Vulnerability CVE-2026-47885 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-47886 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-47886"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-47887 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-47887"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-47888 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-47888"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T18:40:55.741562+00:00",
      "status_notes": "Vulnerability CVE-2026-47889 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-47889"
      },
      "action_statement": "Vulnerability CVE-2026-47889 affects version 5.3.19-tuxcare.3 of org.springframework:spring-jcl."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-47890 does not affect version 5.3.19-tuxcare.3 of org.springframework:spring-jcl. Spring Framework 5.3.19 is not affected by CVE-2026-47890. The vulnerability is specific to the SSE Fragment rendering feature introduced in version 6.2.0+ (July 2024). This feature does not exist in 5.3.19. The vulnerable code pattern (Fragment HTML rendering with incorrect CRLF handling using text.replace(\"\\n\", \"\\ndata:\")) is absent. Existing SSE code in ServerSentEventHttpMessageWriter already has correct CRLF handling via character-by-character escaping.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-47890"
      },
      "impact_statement": "Spring Framework 5.3.19 is not affected by CVE-2026-47890. The vulnerability is specific to the SSE Fragment rendering feature introduced in version 6.2.0+ (July 2024). This feature does not exist in 5.3.19. The vulnerable code pattern (Fragment HTML rendering with incorrect CRLF handling using text.replace(\"\\n\", \"\\ndata:\")) is absent. Existing SSE code in ServerSentEventHttpMessageWriter already has correct CRLF handling via character-by-character escaping."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-47891 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-47891"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-47892 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-47892"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-47893 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-47893"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-59280 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-59280"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-59281 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-59281"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-59282 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-59282"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-59283 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-59283"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-59313 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-59313"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-jcl@5.3.19-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T11:54:47.755813+00:00",
      "status_notes": "Vulnerability CVE-2026-59314 is fixed in version 5.3.19-tuxcare.3 of org.springframework:spring-jcl.",
      "vulnerability": {
        "name": "CVE-2026-59314"
      }
    }
  ]
}