{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b692be1e-efe2-5059-ac5c-12692a40647b",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring",
      "purl": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2",
      "version": "5.3.20-tuxcare.2",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ff443d0f-1762-5b42-8e4f-35e0b87587dd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.20-tuxcare.2 of org.springframework:spring and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required",
        "response": [
          "will_not_fix"
        ]
      }
    },
    {
      "id": "CVE-2023-20860",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b3312a08-5184-5a59-8950-dfceed24b391",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:08f9cd94-6d6a-5e87-9ea8-8a1ff806c244",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:60281bb7-c50d-5d53-8d07-a7053754370f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20863 affects version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:25b37641-438c-5d4e-a5cf-0cadfd454abb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fce2c962-a995-5d04-875c-5db8c8b5a621",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c06b5407-4e1a-5653-8c24-ee08c686d268",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:41045827-acf9-53fa-a84d-01efa0c08bcb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5cd0cdb6-589d-5dee-a428-cb739d53a050",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7360c3a5-1764-5ba6-a234-a9d6a3870d56",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:edaf12c5-0bd0-5559-a577-8355cf839866",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c1943714-ee14-565f-91a7-e2d40ad16a5c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2024-38828",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4640a964-edb8-5e47-8626-82f594ed1ae2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c3d3a05d-7533-553f-9def-b917d11c41ac",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:67bd41d4-ac88-5ef0-b7f1-8d88bb1593b3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:76f907d7-f329-5e7f-b410-ea39f85d5a0c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:321ec701-73c1-5f2f-8455-98959d25af30",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7d769c83-a192-5211-b932-3af957ebb7eb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:868e1c3d-92d0-5335-bd51-1ff4f4326786",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fc1ca8a2-4bd0-5e2e-8da1-71ef26ce8ff9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:49536f43-97e9-57ef-8a03-932d6b75aa9f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:de1d8878-640e-5048-811a-3cc08776417d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:70602869-1eb8-5807-a285-9c0a34db5317",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0bc79081-7e83-5ea7-b629-31f781b2769a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ef49282b-fc91-5b4c-8fa3-32dd37542d1d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7665c73b-8379-5a54-b383-92b78015f518",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:886e67e0-1909-55a1-a1f5-ac366e7ea0b0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1d20c20e-4551-5f6e-a027-36b8af140bfd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:25cc5805-8480-563d-9a98-6457302018c3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d9222eec-765f-57eb-aa85-2bc2f6cbd511",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:188bf30d-59c7-5a53-9c26-f58a2ccd9fb4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41847",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c3cbe73b-17c5-5c50-83dd-0afd2b32d852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41847 affects version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c884f812-ad02-5b50-bba2-0ba2e08e1871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e39ccc64-259c-5693-a6a4-542be5fbfed8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4afa8945-0d15-51de-830b-5a7af56a3e28",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2b1de7c2-42ee-5ae8-b1f5-80d8ab3026f9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5d14a724-9a6b-570d-84d3-2df63466bb6a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:25a227fc-02bf-5a74-9258-90ab4598bd32",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e5481ed5-5d20-5ad6-8e9f-130c46796871",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:542ed182-990e-5da1-9baf-2b18a1259ede",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:961a7604-3e9e-53e6-a6b7-be903e10fc33",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:017ff1fd-4e35-57e4-82aa-08aabb3bc82d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9b528d83-beaf-5097-a5b3-a4347a615c1f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1b9862d9-4081-5b92-a26b-71a415259a3c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:be4a4dfd-3d75-5129-9b6a-8caaff5b1450",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f8622e32-a2f0-514a-89e1-c384bfbc355b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:223aaccb-7c73-5b3d-9961-7fda9e84aea9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:de95e333-9754-564f-9a0f-7591578d0239",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:426dd2ee-2b04-517d-844c-897012320a04",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6d34d08e-71cd-5ac9-ab4d-a79a0f484301",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ad4c9709-720c-5639-89c6-1fbf9844fbf6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:13876be8-96ff-5805-9646-7f76ab25beea",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:331abf05-1eca-5ce0-b7b7-6f649292cd05",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring@5.3.20-tuxcare.2"
    }
  ]
}