{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:dbdd7005-dcc7-5280-8a4c-1deef7f87ab4",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-oxm",
      "version": "5.3.29-tuxcare.6",
      "purl": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:dbe3ddf7-fdee-566a-856f-0435bf7289df",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9be8cade-8026-570f-b199-f703fad3e7a7",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6519b526-3644-5970-9793-726dbc9ae4bd",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1672330a-e5f5-5674-b883-5a67a7020c3c",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a386c572-0c4f-52e3-8f16-7d2436788018",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:589c2755-49a3-5f83-a8d0-4c22667a6507",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5eecc44-1a74-5bb2-a807-a4468e9f0b72",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87adb25a-2963-5384-bd75-233386378f2d",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc62f334-9f51-51b9-94e5-c94ce7176e10",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0673c66-7586-5655-865f-ad77989a5d02",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c66847ab-5d74-5c90-a6e9-16e9844eb943",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:582ad9f3-5ce9-5b49-a27f-cbec76a4e482",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-oxm 5.3.29-tuxcare.6."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3d4e696-5f6b-5bfc-96e5-eb1c3fa73a65",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebfdb30b-7861-5580-a499-92a79aa92b5c",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:980e61ad-3a28-5841-a26b-90779c93ae15",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e634288c-514d-5f9d-b005-5d2decc20ebb",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:706ea301-5e0f-596f-bb31-2ba674952f6e",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4bf83e0-e964-54de-bde4-d5c2d8c23d49",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd44113b-8ca2-58a0-9ce0-7948af1bad2e",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4fa18f20-c786-5d72-9bb8-5bf851728b0f",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f577a789-16b2-5cc1-a74a-d31e654bedcf",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7721035-3ca0-50c4-8b24-c07240a5bb9e",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9c2555e-5bd0-5f31-b773-df48a4ab7c20",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.29-tuxcare.6 of org.springframework:spring-oxm. already_fixed \u2014 The target repository (Spring Framework 5.3.29-tuxcare.4) already contains the complete fix for CVE-2026-41840. The fix was applied on 2026-05-19 as part of a TuxCare backport for CVE-2026-22740 (commit bc0026ae70c), which addresses the same multipart request DoS vulnerability with identical code changes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46fe831d-151d-5677-9b54-84f76d278a22",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59a0f343-3f0e-57ad-a2c9-30b2a3fb9d9f",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2383679d-8cbe-5b57-90fe-1ca0be026501",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7339ce7-785b-5ebf-86d8-528d25d9ca3c",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da36c8af-fbfa-513c-9d36-e489ef120e1b",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a89cdff6-aea5-59dd-af8d-34551853c121",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db82ff7a-6f4c-53fc-b9c7-00b1dc6581e4",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2ce41f8-f03c-5e55-bac0-7beb746d1a52",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:409a78de-ce11-53f1-aa4d-cae92eb7042d",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0792ae06-5ed6-577d-8091-de631345e7d0",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:501518f3-4908-52fd-8c55-cc67912b00d1",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e60aec5-647f-574f-940d-7e2d5e20aae8",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de7fd28c-58e3-516c-b6d3-273535a33ac6",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9638e8f-3954-5bfa-8249-fd805f611322",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9abb97b6-c12d-5fc6-bb2a-1a86a4c82c55",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91963382-b18b-5082-ba3a-24557b2eac74",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d73d602-2329-566e-bc92-aad97ccf41cb",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4eac889-6ada-594e-b5d8-ef4e7cb764e0",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b086518-036a-52e1-914a-8a84aeb8166d",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d9cdb67-866e-53c1-90e3-16e40467428c",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58218672-e708-5a7f-b76b-5e6ba300f775",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4b3b5a5-0feb-5cf4-8302-4643ee83715c",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a271c17-5226-5505-ae45-d025223c32a2",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb0814f5-0ed6-573f-8eb7-a859a28c44b7",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e93bab8-8c0b-5193-9cf5-0f5a4c1ac66f",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc5bf274-a853-5165-9009-498d16670f4d",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7da0ebbd-755c-55bd-82b7-2f8defe90fc1",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7aa6f53-d7c7-5c02-a8ac-0437ea996a2b",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.29-tuxcare.6 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-oxm@5.3.29-tuxcare.6"
    }
  ]
}