{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4c4fd970-25d3-516e-aca9-00b9da6a6729",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-r2dbc",
      "version": "5.3.27-tuxcare.8",
      "purl": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:518c69f5-e5e7-5af7-971f-55cdb5facc4b",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c6efd9e-2ae3-5e73-ba80-0b41ed78c779",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edd832eb-0131-53c9-ac47-2fbcd2b1bcae",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ddc003d4-5a1d-5bfb-a703-a0b6a309c023",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:369eee1f-4d46-59d0-8bcc-efb335993c49",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09341fe8-5434-596f-a8b9-ad18f7ab1207",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0e57e32-450e-508c-aaf0-7d7ff034b698",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd1ee59c-970c-5db6-bb52-406d80a67034",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c5b87b9-9ba7-5666-97b9-c34194513790",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f39a2e20-b41a-5748-9cfa-eefda3c47a71",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61df9234-9815-58cf-994f-db83c61ea6a5",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80e9f4bc-7a0b-575b-9ed0-b5667205fe71",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-r2dbc 5.3.27-tuxcare.8."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b14dd29-4c22-5c76-958c-eb1ea4f78661",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6cb0e46-d3cd-5e24-b1da-6502e4a497d3",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c148e723-3a47-51e2-ba8e-5c55e82c1af6",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01c34d55-e2c7-518d-a718-5a1bc3def8ca",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5610c087-0530-5d18-99a7-2176b026ebff",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd0f0879-2315-5b5b-8fd8-f481c41c37b2",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd415e09-c2a8-51b4-a7bc-0f8029372339",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16191dcb-bc6b-5e31-9b71-c2c6d4bd41e0",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ca97d0b-cf80-599c-9012-35b91e0d2a67",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f55b25e9-5689-5347-8e50-d6cba981e1ed",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fcd8ac8-919f-5fa2-9814-20332dc240b6",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc. already_fixed \u2014 The target repository (Spring Framework 5.3.27-tuxcare.5) already contains the fix for CVE-2026-41840. The vulnerability was previously addressed through backport commits for CVE-2026-22740, which applied the identical doOnDiscard cleanup logic to prevent resource exhaustion from multipart request processing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46e58e2a-7740-5a15-a7cd-f81a09b9d883",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36101ad4-ee53-5255-ac7d-efb6f294d166",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bc3adc4-a503-5303-9cbb-e1f2c21510da",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35dedf68-9515-5cdd-817c-72d5124ec4c6",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee09445d-5454-50ac-8bd2-f8203c3b9a6d",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd63c1ad-aa43-5bb5-afcf-a5aec67585f2",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:110cd3ac-4bbc-5789-b846-3776e538b773",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:696c10ba-bce5-5c49-9cc8-8ae5c5b58738",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b0bef87-7a08-552d-8eb4-936f6758c5d8",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0846e74-b83f-54fc-ab78-52a5c17a9af5",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4d789c2-7184-5d96-8ca0-be593c09afda",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fa9a26a-6f0d-54d9-b182-7119f3ed3967",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46df2de4-5ae3-5cf4-a2cd-97b398c0b537",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f782dab-7ca5-54b9-9116-cd1d1bfb7518",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6dde3817-99aa-5640-91ae-0b4a6e8cea48",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6c38aae-2000-5bee-b653-4c03204d5e1e",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32325772-0899-5bed-822a-865211b26516",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eec9daf9-049b-5efe-a224-dabff072c370",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df030bbd-374f-5329-babe-6f8a627ee9e4",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c99dd22f-5c8a-5144-b3d2-7ff618bbaa46",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6376c2c3-5dca-55e1-84b3-1e6923aef8ca",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c382de4-c6a0-5e66-bf26-54c55e226d4a",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b565061a-1df7-5d49-8729-d40aa15c1a44",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a380c69-41fd-5878-ac0d-fce311b58d8c",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7609b143-e2b0-50f0-9bcc-d373edf80d31",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b6c44f7-eb3c-5b3d-9e48-bae14ad4ef04",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60ef16f9-947f-5753-a78c-ea2fd4ad5c7f",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4572d003-db8a-550d-9be2-ff46ae14dea3",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.27-tuxcare.8 of org.springframework:spring-r2dbc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.27-tuxcare.8"
    }
  ]
}