{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d2545fdc-cc51-5916-8dd6-006b74568321",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "5.3.25-tuxcare.7",
      "purl": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:47a0be84-1d75-5f03-83ba-f08adbf2f508",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6073f023-4f3f-5062-bdf3-db689942be44",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78409a73-6832-5073-9d3d-e13e21db3235",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4299e360-7d33-505c-a840-680ed58544c5",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1e38946-dacc-5d37-ac68-7b9cda5d6c7b",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27aa03f9-8e15-5c54-9f8c-d1588ccb0451",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f144fbc-d7f9-51ce-9baa-a2cdca55168a",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eae08048-238d-53fb-a292-2f8a45ad6450",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0e6c4b9-5085-5205-a424-ae4fdce24364",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aac4bf29-965a-54a3-9d9c-d5740e2f8323",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1f93418-41a0-5c58-a3f3-f58611e922f0",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47e14499-ec71-5375-bd84-c3899c946f39",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2dda9d67-59ff-5527-90db-f8cac95d1b1d",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38434379-3af5-5ee9-86ff-5dbe2fb60af3",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38724bc5-a47d-54e3-9477-79cfb3281206",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8779dfa1-9913-57b8-8286-2f26e860ec0f",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5f16e2b-62e7-5ebb-877d-cb578b47c73f",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1690515a-b4d5-5fbc-aee0-a30a1e4a5992",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad5d9b56-799c-5c1f-8418-584dd24585ce",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3dbbf9f1-c532-559a-bcd2-fd258541da61",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d7142c0-eb9f-5ef8-84e0-9c8dd9a5db73",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4fb8eb96-8d6f-5d03-9e53-6c92c2dae555",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e24cef86-fb8a-577b-81f7-205f2fb414a2",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61e8ea5f-fae2-51e6-849f-ff02398a8b78",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9966dae3-7799-51e2-9e64-ae6482696f62",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7f74755-202d-5682-8e84-00d17b29e9dd",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0bea1351-1233-57d2-90c9-5b66bf498924",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4795c60-de3d-5abb-a5cd-6dfb5a8e411f",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac7f743b-a3ed-559b-b1ac-591ab1e3ad04",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5c69a11-1402-50c3-a5f3-26853cd98aea",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14394081-6b3d-5ad2-a037-ac0a69cf0417",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:570a01fa-fe91-567f-8f44-04b05887ac61",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.25-tuxcare.7 of org.springframework:spring-orm. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:859bab87-fbf2-5bff-98c8-5c8022e3e281",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4550dd40-1e7f-5434-be4a-1b1d4cd8f62b",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:407ea7a2-ac89-5a22-ad53-3430b0416347",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:116cff5a-5bc8-5abb-8762-85f51b8cb52e",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c89be6a6-b2f6-5280-9484-9ff06cf7445d",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed932fe0-d248-571b-97cd-60256c61dcd1",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db3721ac-44d0-5789-bacb-5a4b0dba9383",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34f6852a-250e-5e85-a431-dcd7c4c1bce4",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba4b5d80-fe37-5115-977a-3d9b4925859c",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e4745fb-6a02-515a-8e82-305a50df6975",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60b05a15-81bb-54b7-afd3-d7ece415d55f",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edf3553a-d34b-51f6-a31d-9f61c6dfb579",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7f3c63b-9747-56a8-a374-52c3118cec9d",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dbbacd6a-d95c-57a4-b888-94799e77f348",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03167e6d-da86-5ace-a19a-5416537e76ec",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3342dac-9b4d-5b02-81ed-64a6271512a8",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:966203ab-eb12-5db4-a6b2-a7bb34632e61",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5548044-f7c5-5961-bae2-bb62481140ce",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f9c4a15-253c-5957-8fe1-670c41bc4be6",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:019445ef-5aa8-53b5-8989-786e96522a96",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1804f779-e6e1-5174-90a1-76de670e4d0a",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.25-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@5.3.25-tuxcare.7"
    }
  ]
}