{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:37e559fc-2d85-554d-b0ae-141acf57c002",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-orm",
      "version": "5.3.29-tuxcare.7",
      "purl": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:9136369e-9f71-5b46-a737-77c1ce9c885b",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2deb3818-c1d0-5fe2-badb-475c43884ed1",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:013ed429-5f8f-5efb-8e58-f7973d2a567a",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bdd32841-5f3b-51a3-a9db-f63b34db4388",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5dc4f04-0fa1-5330-b35e-eeb39f28c8d6",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8ee2682-38c5-51ca-ae0b-00f777daa277",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:151fbbdc-c8c2-5ac4-9132-2883d77211cd",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea1e7480-acec-536d-a1e8-52bd2b5cc31a",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c36cda91-6e69-5b15-b7b4-bae3f67535d3",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:662ec62e-a935-5bdc-bdf2-e57db8cae376",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80d947ca-cb3b-57a3-bad6-534c8a41870f",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b1c0035-77b9-5b67-aaf1-dd47779f0f04",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-orm 5.3.29-tuxcare.7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f05bd2b9-bbbc-5cae-af00-d338e2bb30b0",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd025385-454c-5cfc-b1ca-15d147da0bb3",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06cbb1b4-793a-5311-89e7-3c226ece6ff4",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:449a9e40-9259-58f8-8300-25bb8f943714",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9a7752c-5b7e-5832-adc2-e3f43a1b5dc4",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4e6d508-46fa-5a26-a8e1-cf6edfae267e",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b807d29c-3156-5a57-8b63-675081ef6f0a",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0a03b59-97f8-57be-b1c9-0be0163c5347",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56c2e2bc-5705-53b2-96da-05626e4d8018",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20fd9113-91ed-513e-bdd6-f7d1c922d393",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8914b136-dbf9-576f-8919-43793274e539",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.29-tuxcare.7 of org.springframework:spring-orm. already_fixed \u2014 The target repository (Spring Framework 5.3.29-tuxcare.4) already contains the complete fix for CVE-2026-41840. The fix was applied on 2026-05-19 as part of a TuxCare backport for CVE-2026-22740 (commit bc0026ae70c), which addresses the same multipart request DoS vulnerability with identical code changes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e49c509-41b9-5cc1-895f-22c019eddbe8",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a35a65cd-83c8-57ba-aae9-ad8ef4dc6a27",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edfe79ff-90e0-5a81-b1c6-9a144647e281",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23eedfff-4204-5681-9b0b-7e86220942e2",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae2d3e18-05f9-5fa8-bc78-79a6399246ec",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:787ce47e-4ce7-5bc9-b92e-2bec76007484",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5c92229-946a-5fc1-896e-da22f72da50a",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63f66fe3-c2a5-5284-a556-6312414ed060",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ec08e2c-18e9-508c-9e51-de5b0f4a8421",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d47621ac-2cb3-5f97-a882-64237faaef05",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d775ada3-01b3-5e0d-a6b6-719ba42069dd",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c2b82e7-86ad-5d89-902c-e64af6270bd5",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c4cd243-761b-50d3-9471-c2e63c4079b2",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2c79046-6847-566a-874a-ded550240f7d",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:366fd7c6-5707-5ede-92fe-440456718178",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a88c52d1-c107-5edc-92bb-919e036da471",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:960ec339-28de-55c2-b4b7-a0e67fc44705",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a21b4d4c-e791-5608-a6b0-8ae11a8c4c80",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:825c299c-8528-580d-968a-ea209a0d5e6c",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb26a0b2-8d0c-552a-bfac-459ca5cf01a3",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90dcf6b6-187f-509b-bcee-2fa9e2b6c063",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c3ba0e9-e3d5-5c88-a658-63ad7c8b9a2c",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d694db3d-e0c2-5314-be3f-b2672ac4b8a2",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1d30f10-6032-5553-93bd-c6422280274d",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09a984f5-9be9-51ae-a2d3-b016759a3a86",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0e3d138-59ba-5161-8808-b8f31648de60",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb104b24-bb3c-5ea1-bd34-7eed6f231cd7",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfe9d9c2-0245-5c2e-ba48-6fa08adafb6c",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.29-tuxcare.7 of org.springframework:spring-orm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-orm@5.3.29-tuxcare.7"
    }
  ]
}