{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a3f74bdf-2786-5651-a198-c18a172c6bb9",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-context-indexer",
      "purl": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2",
      "version": "5.3.13-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-context-indexer",
            "purl": "pkg:maven/org.springframework/spring-context-indexer@5.3.13",
            "type": "library",
            "group": "org.springframework",
            "version": "5.3.13"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c2e02fb6-77c3-59cc-bedc-27dd8ac5ca5c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required",
        "response": [
          "will_not_fix"
        ]
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ea8f1952-7525-5aaa-af1f-9db0283f8e8c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2022-22950",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a19a611b-4adf-5c30-b187-44c551f33528",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22950 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3a72a491-9fda-5a41-9358-d42d26e80eec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22965 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2022-22968",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:caff279f-c134-5262-8ea8-05c61a1a28b4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:09947ddf-8775-50c2-bab5-88932c7e6b9f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2022-22971",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7fedde8d-f968-58ae-8fcc-fff5ada121e5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2023-20860",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:da89cd63-38bc-5320-b4fa-a065a968212b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a71683f6-8a20-5b40-becc-651eb2697389",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ebce58fb-5a17-58c1-9677-383ebfa6eb0e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:62c9a55a-92cb-51b7-a91c-c22a8b587c29",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:610a0466-436b-5819-8742-6241e387b86f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a90e8c65-b6cc-541d-8432-017eafa45644",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:08e11caa-9638-59d1-8fe6-ce1bc0b5e946",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:eab30873-ae84-5ec4-b702-459e5afd4712",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f0c268a7-d8f8-5052-ac06-34c1fe9b683e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4666fc1a-efaf-557f-9746-c8488e4fd9d5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c9391ff3-27ba-58f2-a745-ae98103894a7",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2024-38820 does not affect version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer. not_affected \u2014 Version 5.3.13 is not affected by CVE-2024-38820. This CVE addresses a locale-dependent toLowerCase() bug in DataBinder's field matching, but version 5.3.13 does not contain the vulnerable code pattern. The CVE-2022-22968 fix (which introduced case-insensitive field matching using toLowerCase()) was never applied to this version, so the locale-dependency issue that CVE-2024-38820 fixes cannot e...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2024-38828",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b770c5cb-99da-5a81-bc51-d31c2067cd55",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2024-38828 does not affect version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer. not_affected \u2014 Spring Framework 5.3.13 is NOT affected by CVE-2024-38828. The vulnerability was introduced by an optimization commit (gh-31834, 0970b1dc7a) on December 13, 2023, which post-dates version 5.3.13 (released November 11, 2021) by over 2 years. Version 5.3.13 properly allocates ContentCachingRequestWrapper's buffer using the contentCacheLimit parameter, never reading request.getContentLength() when...",
        "justification": "code_not_reachable"
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a29429c4-978a-5aaa-8b5a-f43db82da4b0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:38ea6e6c-096b-5d0a-9293-588d414abf83",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1cadcbbe-01c2-5c41-8992-a037ea0d6356",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:613a6120-ea10-518e-a7fe-e21fe033e328",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f75905c0-846f-5a2d-bfc8-b89faf6baae7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:710c4804-253f-5f94-a25f-7cab64d9db5f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:503c497a-b2a8-53d4-85b7-ee812e2371ec",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3e57016a-586c-58fc-9c31-ac6c0fa3be09",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d8979fbb-1eb9-54ce-a36b-18c9d1ae8cbb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c6d63539-2fcf-5cdb-9f1d-c3e88a484120",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e670b1d6-d608-56dd-8215-f751afd97fce",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7537940f-e0a3-545f-9a7b-d145eac45ebd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f7afc7ff-96fa-5e3f-8923-4cab70c9e5fb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:66339bb0-4b47-5f54-8dcc-46a5043d4380",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4d79533b-9707-5ce8-a4f4-80a277003111",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:124fc422-db35-5711-9493-90d384d5c5ba",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41844 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c9dc444b-4b7b-5347-94cb-bb407b1f8a9d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5a98580b-91dd-51b1-98e3-80aef3f1d521",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-41847",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2c47e16f-fa7b-5c46-b8fc-bacffebc021e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41847 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6b3c822e-2a08-554b-a19c-169ce722d243",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2b59dc1f-8497-50be-b9bc-d085902caad2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1505f264-d395-5b73-8203-78e9b89baebb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f6e5aecc-2701-5d9e-975d-a0f1e3e6d9e2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:02eece39-35d6-5e0a-bf5b-9c6370efed0a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ea0310b4-96eb-5dfa-892f-42e0a0db2cec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f97df38e-4cb3-5f26-aa63-a7fe3162b862",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0661d28f-a471-5e76-8c88-f94b9ad9924f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5cac6776-39c8-5bde-9ab1-077c01c5d958",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:62570576-5730-5288-a092-41d71a7301ea",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:55cea456-f041-5dac-ba7e-7ad552c32e32",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:24753948-cd1c-53f8-885d-466c8029d8a3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:38c6d64d-7704-5022-bd2c-83e629919f6b",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-47890 does not affect version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer. Target version 5.3.13 is not affected by CVE-2026-47890. The vulnerability requires SSE (Server-Sent Events) Fragment streaming functionality, which was introduced in Spring Framework 6.2.0 (August 2024). Version 5.3.13 predates this feature entirely - the vulnerable code path does not exist. The CVE affects versions 6.2.0-6.2.19 and 7.0.0-7.0.8, all of which postdate the target version.",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:775bdafe-f008-51e2-abee-05204e42391b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1a50eede-fd44-531c-b5a7-1b0f2b3f8a30",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b7d5e48b-6865-565c-9585-90e96ace7c21",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f16cd2ca-8760-5eb2-b225-e7c2452e6ad7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:22e4389d-bdb6-554e-a0d2-7bf538339fe3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d6a3786a-f814-50d7-8749-9821ac9d433f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2eb1d865-1ad1-5f16-ba7b-acb6adfb169c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9255d90e-5c45-5c48-bcef-d75a061f9862",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b0028e73-0649-57dc-b311-a93879b4bea1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-context-indexer."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.13-tuxcare.2"
    }
  ]
}