{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:62fc234b-cb6f-5ca1-a2cd-d7585f628295",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-oxm",
      "version": "5.3.31-tuxcare.13",
      "purl": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:37afaee0-4f8c-5c86-80c9-7a27194ed504",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:795546f1-007d-5503-81e2-a5e02606027f",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8788c4b3-0dc1-5173-9875-b6e04cf6b737",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7444626-c1c5-5f87-9671-98d4891ea580",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f97e859-a711-581b-9b6e-360941a6b071",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7400bc36-baa1-55e0-91fa-08e210a8e5b4",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b97f1a7-e060-5972-9bbd-3ecc6b3a4e94",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7aac87de-fd50-55f3-9aad-7666ff60266d",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4699156f-d245-5153-8f8a-2c8ce94270d5",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e5661a7-6739-59c3-b48f-dd20e2ad95ea",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d25121c-124c-5715-bc63-9acad8f9fb64",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60d5cb61-044a-5616-853f-bbcd37b0685a",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-oxm 5.3.31-tuxcare.13."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:989eea2e-12a8-5259-b399-58dcce961290",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:314f4e3e-edc0-53e6-b8ea-e2bb7510d65a",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d7bdc33-5a1d-58c1-83be-48c00d6e9a3d",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:588aa0bc-e856-5fe0-bac2-09a6600b35c6",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0f8500d-9150-5800-aee7-3317484a9712",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8844b1b-81e3-57e4-ac65-8cdf6a472037",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a8cce31-678d-5d20-a857-086ded102afb",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ab98f6c-6488-56f0-a434-9ae984a03535",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b56ab3cd-d194-5024-84fa-faee0c9401a0",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1203ab3d-9947-591b-b038-44cf394022ea",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5bc4e37a-ccf9-5d68-b5cb-a868fe00b77f",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.31-tuxcare.13 of org.springframework:spring-oxm. already_fixed \u2014 The target repository (Spring Framework 5.3.31-tuxcare.3) already contains the complete fix for CVE-2026-41840. Both required doOnDiscard handlers were applied via commit 615477c88f (labeled as CVE-2026-22740 backport) merged on May 4, 2026. The code changes are byte-for-byte identical to the upstream patches."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34d7e0e1-72f5-5456-8d8e-ace1d5a86485",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e2b95e9-0d66-5be1-bec3-2d1d4e86219b",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:badc414b-13bf-599c-8915-75a5fce20331",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6815ae81-eefc-50c6-a315-878c3ac6de9b",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82312a2d-af1d-5c0e-bc22-b041f29bd2b6",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc378945-baec-5d57-a4cb-fad377b17fc5",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:285cc8bc-4004-5b6d-a755-c747b9b25fa6",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c86b8d5-bbba-5e84-930a-9c6129dae2cb",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:827d67c4-8da7-5369-a70a-eb3232f553ef",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc39cdda-8fb9-5d71-b056-92019ffd76d0",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4b0d861-9dc4-5535-b57e-330dabcee326",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:419c927a-f70a-5170-8116-8144d863c8c6",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:025a209f-456a-592e-95c0-887d1c4afc02",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33d9656d-07ba-5587-bfd6-e7fed17ab8c1",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc2f3e63-d836-5499-a4bc-cf8a58352480",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5ac3dc0-3a49-513c-a6d4-5d386f8ab6f7",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74c66764-c160-5aa1-9011-5e19fc76034e",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ce8fdd1-bdfb-508c-b59f-ebad364d21ba",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3f8ab85-bc13-5140-bff9-a557469831ea",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5550a09e-39ff-50d1-b5c0-6133b0920166",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aacef77f-7868-5629-80b5-5e2697cb118e",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35fc002c-d701-5f7b-a1c5-3c9b04bbdf7a",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24a3648c-a8e0-5501-b0d7-2668d613e2d1",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb1b2d9e-7d34-5060-90f7-4ab5514c4211",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0de2c6cc-600d-5697-9684-14a1341c424a",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05f4e098-510f-5de1-a0ad-5c58c2859d1b",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f4f177d-349d-5359-b157-7c7039f7e481",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27bf1a38-2c43-5c52-93db-437ab5a7802e",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.31-tuxcare.13 of org.springframework:spring-oxm."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-oxm@5.3.31-tuxcare.13"
    }
  ]
}