{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9d62f77a-b8d7-5a68-bfa9-db6d89c4f861",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-jcl",
      "version": "5.3.30-tuxcare.7",
      "purl": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:fb92fcc4-8a19-508c-92c0-1af747641fe7",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d828e063-f1ff-54ee-bc9f-a9e17dc001ea",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f270dc31-c0f8-573c-8050-7ffbb0a800af",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8110bd68-a118-5816-960e-ef1116ca73d6",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:733191b1-a7f7-5af1-9fe9-3b08a357b022",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60c1a0d4-96bb-5fea-bfb5-6bd8af16a777",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5725097c-c6f0-53ce-b066-8c42a0f78b4d",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2a36e9c-c489-5f23-a1fe-9db17b176e4c",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca7d37c2-87fa-57f5-840a-40c172e04f0d",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7b5a239-d7c4-530c-b202-e2795d4a3a5d",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2dff3bb2-859f-590e-a32f-7d9f9418a123",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66cffd39-7657-54d7-9a20-3af25815e6e7",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:748ad533-cdca-5172-b50b-c3ef2c4adf81",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3b6b7e4-9c16-5ea0-a5a7-99ae9302192f",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61f610e4-faa1-5c30-8619-5e13dbc75e43",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f604af3-57cd-5d1d-a5a3-cbb7d50b1a93",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdb49a0b-325f-5409-b017-2805e6deb5bb",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75ccf34c-19a0-51c4-a02b-6cf018b0fe25",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a60c8a1-0196-583d-84a7-f4e3f36248eb",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42740087-e616-5e16-a696-686caf4f3985",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07ebbd4a-1867-5f4b-b955-26939025e5cf",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce177c24-8c01-5ab6-a752-0059596df045",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.30-tuxcare.7 of org.springframework:spring-jcl. already_fixed \u2014 The target repository Spring Framework 5.3.30-tuxcare.3 already contains both fixes for CVE-2026-41840. The identical patches were previously backported by TuxCare as part of CVE-2026-22740 (commits 1a619adbfb and ee9443b0bc, merged May 2026). Both doOnDiscard handlers are present in the current code: PartGenerator.java releases data buffers on discard, and MultipartHttpMessageReader.java delet..."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0538fd55-8a8c-574e-a6ac-a92ec649c56f",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4daa5ed3-8149-5331-ab23-5f243ae0a8ae",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:701fde26-9c08-58fc-abd4-1a0e6e961ca4",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1af39246-f7eb-5b5f-8256-318e57a3fc55",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2da194f2-b75d-50c7-8a0b-42cb7dda6caf",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:782437d3-cd10-5c14-a422-c22d6ce56cbb",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8435a85d-f632-54e3-8a8e-e7073e0b3c50",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9011d7f2-ba36-5890-aa05-54d5516629b6",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:248b2263-635b-592e-871a-b03a8bf8038b",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84c35cc9-cf18-58a8-a96a-eab4212eb4aa",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72ca699a-be48-5bce-bdbe-323a8068365d",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d3c8ffd-7ba6-5404-825e-178e9e23f162",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9aabcb2a-0829-5b6b-9e5e-12531bfe48db",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be6fd036-63fe-5b0a-8cb1-a3b5ff92d0bc",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7ee786d-dbd2-55c7-a5ed-0037e5ce9228",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1692ee12-2081-5b03-8acb-473f23ca6219",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d40195aa-b854-54c6-ab47-a3f1f6ed8a83",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eaeb574e-c38f-5278-bba5-b88a0c9396f9",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60db7b5f-5399-5450-b092-b4d4af634867",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3e8ea88-4185-5db6-b5f9-04683f21b117",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9c267c8-504b-557c-933d-38e943b8d1a4",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e550b73b-7cab-5aa5-b11d-d7a9e298b2d1",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66e9770b-c746-5079-ab8c-a087b487d748",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:862ae4c2-6e8f-575e-a8a1-5c1dfc700616",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ded25257-cd9e-5c20-8cbe-35bfda1389a0",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b309e449-1e9f-5807-aa2a-2e09aa0a0c70",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f61ea08b-ce38-5826-98f6-106c4eac2171",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b521a0f-71a4-57b1-9368-bfd5e3960328",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.30-tuxcare.7 of org.springframework:spring-jcl."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.7"
    }
  ]
}