{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a8d685ca-122c-5fa4-8cf5-ba1c1115dc59",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-web",
      "version": "5.3.31-tuxcare.13",
      "purl": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:ae4dbc54-9cd0-51ab-802e-582e5c6991a5",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:913f9180-f7d6-510c-a838-f4911a5bb2e6",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35b9d219-de05-51bb-b4f2-5a7e096a2dc6",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1df554a-dd52-5284-b27d-2df6397505ef",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6c3a2ab-ccac-58be-82d2-3fcacd36f824",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08c7c39b-9732-5713-83d2-a2838a96f4ac",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7edf7568-e4f5-57da-8483-6acd12a067c1",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a610920-423e-5590-a722-869d7d9abc7d",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70039a25-fd68-5721-89a7-c0c41751661a",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14662dcb-95ca-5c6c-aee8-259f4c1caa56",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65a053dc-0d08-5d19-ae94-bed548fcca1a",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96ef5123-a22d-5c0a-8759-2ae22f7bdad3",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-web 5.3.31-tuxcare.13."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae26b91c-f9bb-5896-ba8c-3ec5a9bc1792",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9484359-37c5-521b-b176-f41d1befe4a9",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98f9206f-ac1f-5899-bd2d-fcf4334e266d",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dfc6dc01-36d8-5b5a-bcb1-de229210551b",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1c2aeb0-60b8-5b7b-bfcd-7e873dd6e21b",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:498b4378-08f1-53e9-be7f-b0741e4e3d7f",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51d764fd-636b-561d-aafd-0990ae0fdf84",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0bc50320-be67-50e7-be56-e3fbf2dcf221",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:234958e7-d0ae-512c-aa49-96d3084b7738",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ae45542-163b-5d6a-b664-df1ba1be10fc",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf9d4b69-b480-53c0-898c-ce4a6d34434d",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.31-tuxcare.13 of org.springframework:spring-web. already_fixed \u2014 The target repository (Spring Framework 5.3.31-tuxcare.3) already contains the complete fix for CVE-2026-41840. Both required doOnDiscard handlers were applied via commit 615477c88f (labeled as CVE-2026-22740 backport) merged on May 4, 2026. The code changes are byte-for-byte identical to the upstream patches."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc4a6d9f-84c2-54ac-8053-08cc70cf587b",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52afe9e1-acaa-55d2-a320-510b3c7ed033",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d1d571a-3022-57b3-af9b-8551f1188295",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0c79ed5-9aed-5c25-9733-4d83c0fb14f6",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc0efa54-4a65-58a9-827f-c120b2453824",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cf9fe0e-d9c0-5e31-9159-c19817ee4268",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8901efa-b4fe-5e82-acda-86021347ab9d",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:441830a7-f4fd-59ac-b87a-dd6c710959e4",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e7caa78-ceee-5a04-afb4-46985149eb14",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c302b874-7666-5de7-a159-fac689f85d4d",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:465a2e3f-4ded-5ec1-8361-1fe8a05e47e7",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ed77bc3-7fa5-50df-8028-304cf4c48923",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0829b58-9f61-53db-8f1e-616483abef12",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39ea4771-eb68-59e4-9ec3-645b92797c19",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae39a563-9b94-5588-8e43-2a07f8b9a303",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d1a12f5-c57b-5acb-8382-e0954faf2117",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13e4244d-31d4-528e-abf6-456a875e9bfc",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6996d0f9-a7ef-5764-9724-15cc0d20d67a",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08353a1b-91d5-5566-bcb7-c044e831fd26",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:279c7613-7795-5ce0-926b-a0efc93b0b88",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e07066dc-30fb-562a-af90-ae19952e3799",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54820b68-f1f7-55bd-b3cd-e396684f55d0",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88801e30-2342-5b8a-8a06-8d2fd4a501a1",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f21afba-5884-5a19-a438-25fa2c52b268",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3752b69e-3291-5ffb-934c-f782f5d7b630",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34630c87-be0b-52d5-8c0f-5776bc8aae0b",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65c59801-bf3d-5b8a-b55e-77172f459dec",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:128dc632-536e-5aef-bf6a-aa1d3c9c9fc5",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.31-tuxcare.13 of org.springframework:spring-web."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@5.3.31-tuxcare.13"
    }
  ]
}