{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7c4abf90-707e-5f1f-a272-efd416f69530",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-context",
      "purl": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2",
      "version": "5.3.33-tuxcare.2",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0cf0ea75-ae67-5b2d-a738-bbcf240e2f93",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required",
        "response": [
          "will_not_fix"
        ]
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:71443415-73e4-589e-9416-1da1473b953a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f4f6a0b4-c634-56be-b6cd-da39bb388662",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38808 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3673cc0b-341e-51c3-b856-2628e2e0b2cc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38809 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:90295bb9-20c4-5b56-81bc-a3efb1619b56",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f3bf4be2-e335-5f4b-b099-9b1dda9c14e5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:70d3ff92-6535-5e94-84c1-9491f36faf69",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2024-38828",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e03963ad-bc5c-55ff-af8d-8bfd891ff425",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38828 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f1992d65-b981-5297-a263-cb2af7e1aacd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:be3d78fe-e454-579f-9e31-54f6b247d9d0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:99ae76c9-d2fe-59e4-b9e9-d3c5770223a1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3c5a5fa7-fff6-5187-ba33-1b7448770af3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ceb45063-4307-5201-bb84-87bd238440a7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:266a940a-0fa5-535e-94b9-e43fb5ba6de7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2866c86f-9dad-5975-a9dc-72401ff32790",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b0823417-b7a9-5d94-9e03-30d5a09dfaf7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:32b53a33-e5fe-5b0e-876d-fbe9809fe45e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:986102cd-0b02-5d67-8fb5-f8cbb0c61f8f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f184a471-a604-52bf-8a9d-0122337206ff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6e614e58-574c-5246-82a4-1e9ee3c90607",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e72a42f9-2a3d-5be9-a2a2-5c831dfacdc5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ef947b77-5f40-5292-ad0e-bcaf9d10c288",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8c41c430-edaf-5481-aa9e-c1bc8d8b09a8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5e0a8627-6778-509d-8e61-92da64ae5a93",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1b8d1281-9ad2-59df-b7b9-00be78f30ce0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ac401126-a9a7-5bc1-a3a4-6437f50ede7b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41847",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d464852b-65a9-5d34-a41a-6e810961fcd4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d7331a65-b11d-58c4-aaac-a83c828f9646",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a11c78d2-92d3-53ac-97fd-8dfd1c7b45ac",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4c1c8eb4-ac1f-52ac-9f24-5273e67b797c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:46924021-69d4-5145-b276-ad6ac17b8d24",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:faf26175-4020-5168-a475-5cdbadbed98d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6abb24f6-eec3-5ecf-a734-d56ee6fe5215",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:70f83887-2b28-5fc3-83b6-753182c9d168",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:cff0279c-cade-5b3f-b9de-705fa0c42dd9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8612e4ba-423e-55c3-9bc9-88e28ffbabe5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8cc3dfa7-5512-503b-a977-8da86e3617e5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c76a4b00-e1d1-5657-bbed-a3ee69ca531b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:15a93aac-8fb7-5a4f-9ee1-5639acd570ae",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ab1f91e9-afa6-50ac-a8f9-36642429c984",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7455627b-82a0-57d9-8900-81936514e082",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fe206f6b-8c53-5428-a7e0-ae6df27524dd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b7135c77-2cce-5ce4-b016-83ecc5e60696",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8ae8319e-6ca5-580a-8e28-2c7799bf35dc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5b12398e-0cdf-5899-bd86-2c8416233841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9546c1c3-db3e-5c6a-92cd-2f87a3416a03",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:46353dc0-70fd-5575-8ab1-92a4c352e633",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c03728df-d505-5402-9cc5-796ad0503c74",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-context@5.3.33-tuxcare.2"
    }
  ]
}