{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4834fa24-4f39-55f8-8097-c936496ecb68",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-context",
      "version": "5.3.39-tuxcare.18",
      "purl": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:aeff04f5-a888-59a7-9ec2-416ef8bdf3a6",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02554dd5-e4e7-5903-8747-ddb0c01b896f",
      "id": "CVE-2022-22968",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2022-22968 does not affect version 5.3.39-tuxcare.18 of org.springframework:spring-context. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbb41cd2-61e6-5af0-a1a0-87b4f5cec33e",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95bb8a15-6770-52d3-81b5-fc491cfed76e",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d839f34-1877-5bb5-9efa-792716c0c787",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1fd601e0-c082-598a-8ef1-c3553e8d0437",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7707184b-095e-50f4-86be-14b3fef2aaf3",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b57a2cea-e481-5045-9828-54a2ad4acee9",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-context 5.3.39-tuxcare.18."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c698e9e8-d232-5cb1-b26f-f59e0fb88bbf",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76c08812-bc0b-59af-a2e6-769741c41d81",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f388add-fa67-5659-a647-1e3cd66e4123",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9dd117b-9aae-533b-b4a1-29041652b824",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cf2c085-88f9-5cea-865a-3903998fd2dc",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed043477-210d-532f-ac64-d807cca3017f",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e35b7a3c-935e-55a1-ba1e-8c6d75fc3b6d",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f54dfb9f-af2a-59f8-be76-5fb5e319faa4",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13121df8-0c00-5d06-b0a6-ff5112ba4f55",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51f76327-9e30-5de6-82cc-6f50a958ae90",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bde2e8bc-45c9-5ca0-b1fe-649bb6b95da9",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e9c7611-4cbb-5b63-ae70-80d5df1618a2",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02eeaeb4-9ae9-5846-a99a-df5cbbaba69a",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6314fd87-102c-5e18-8f35-8cd0120f8b81",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45385ebb-3aa0-5032-8823-987318923c86",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28b06eb4-b752-5be6-a8d1-2ff6999baf7e",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b72025e-4c9d-524f-917e-8173503c2103",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:385786d9-9d15-5f5e-b50d-d1106dc1cd49",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:676563d1-f4ef-56dd-8473-4b22807515c4",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e78c8de9-3daf-5bcd-bd05-30f863b4ae0b",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:190d31ed-fb05-5445-9111-78514d07c88f",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10870f08-b62d-555c-93b7-4f5542a12c0f",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5727a0d-ba2d-51d7-9516-10d95b3e51bc",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f93db7ba-2569-5154-8afb-9ffc6bfbed4a",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c18d8ca-b343-5ebd-ac97-3fadf2c59040",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8127bced-775f-5d6a-abca-505dcdd3fc53",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-context."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.18"
    }
  ]
}