{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9eb4b56a-8c42-5e05-a582-24c7ad979087",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-r2dbc",
      "purl": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9",
      "version": "5.3.24-tuxcare.9",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:4bbc054c-c2e7-508f-ae57-26d2ef10d8f0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required",
        "response": [
          "will_not_fix"
        ]
      }
    },
    {
      "id": "CVE-2023-20860",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:760987f0-933f-5380-abb4-d0da92119ab7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:82389f5d-47d0-5682-9ec0-5275e907de2a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:6218ff7c-ba16-5413-8806-48bf15b03eb9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:cc198eee-ae27-508c-ad0c-ef49df295a2d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:003bcec0-a7f4-54d0-986b-8b5e22cd6d0d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:ef174893-0c8f-5253-9f7b-96a74fb09b93",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:4dd63c16-00cf-5045-8306-9a2dea198de7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:7d296605-0128-534f-bdc9-3a9aa26ae664",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:b1bffa99-d507-530a-a98c-89091c0c7349",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:e9f9dba8-3a18-5b99-925e-529863484a49",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:f3829531-50f0-551a-91a4-80d0322abd5a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2024-38828",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:9dd856d8-850b-598e-b47c-abd769cd6f2b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:db9aa453-a9f2-505a-a551-09aa3fe9c882",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:f57ad420-cd1f-5ddd-9fac-2f62abace950",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:37628b33-175c-54dc-9c02-3830c747c80e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:2a514345-9eae-5835-b4b7-fd7313e6c356",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:e2c591af-556c-50d8-82e8-dc93d6b70bb8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:0ad56694-83b2-5724-bbcc-47d22b88c4aa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:7522a3df-e138-5767-a2c6-acf3179da4dd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:14b76833-b8b1-5ab7-af9d-0f40bfc23ea6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:39919d2a-0b44-510f-aed8-9a64c10fd3e0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:146ec939-6816-56c0-8f52-afb1d2c2cfb0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:a85eea44-ac3f-5b7f-827a-7c2821a23a17",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:d121a424-bc79-525a-91c2-e25e98c1351a",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc. Patches already applied: 7052da453285658215efc1dd5ecb0d472fde2de1 (already in target via 2c11852775 'Backport CVE-2026-22740 to 5.3.24')",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:5ea6456d-4ab4-5a46-bafa-0b0a4d661e14",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:940cc20e-52e0-51b1-a051-73f616f26359",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:641a074a-abb1-5033-8703-25d838f6d0a0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:34ba4408-9c7e-5ec5-8a02-f87d8557bad9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:60679dea-e821-5e75-af14-e4ba81444be6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:72bf57cc-1cbf-56c2-9408-b2adacdd4bc2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41847",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:4559f69c-1971-52f8-a72c-1c17bbfc4f5c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:8516e69e-5486-5633-b70d-59abde9fc724",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:e3918e32-7f2a-52bb-a41a-48a44c49dc39",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:25d1a725-4d76-596a-84b3-c98b7de76b2c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:97f8d8f1-2332-50a8-8aa4-c8b9b28784ba",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:7399e540-d5f3-5515-8b28-26b517ef6114",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:765431bc-0de8-552a-a6f5-09399087c9cb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:e8fa87e7-0b95-5a36-9b8f-c73d66778e28",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:99450057-751d-559e-a82c-10a7a164aef4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:647f122a-384e-5f7c-a3c6-111b47d3a945",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:413e99a3-2f8d-5066-86fa-091c11a1bda0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:c0313d82-5a87-5e97-8778-2d210ba07cd5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:dc331bfa-3948-59f0-b1fb-5085a3057c7e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:bb94291c-a22a-56a8-80c6-f05289ec2ac1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:f3371d9e-6394-59ae-911d-51eb02c0ac30",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:01b2c5c3-6c07-537f-9ab1-52f8404a9f00",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:6f531cba-6685-5d0c-a8c9-87430a4f6384",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:a3ce1248-b303-5d99-801c-05df9f1bd13d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:5dfe0195-1e3e-5e34-9d9f-43213f5a7142",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:ecda0126-c2ee-5821-94a3-a055d0fafeaf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:4d565ee1-744c-591c-90d0-c87734f7a468",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:8196249a-8d7f-5195-bfd8-9be065bf8610",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-r2dbc."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-r2dbc@5.3.24-tuxcare.9"
    }
  ]
}