{
  "@id": "urn:uuid:47bce50b-57e1-445c-bbb3-c2884dda58b4",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 41,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-02T14:58:56.128088+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-context@5.3.19-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-context@5.3.19-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-31T01:07:43.876853+00:00",
      "status_notes": "Vulnerability CVE-2022-22968 does not affect version 5.3.19-tuxcare.2 of org.springframework:spring-context. not_affected \u2014 CVE-2022-22968 describes a case-sensitivity vulnerability in Spring Framework's DataBinder disallowedFields pattern matching, allowing attackers to bypass field restrictions using case variations (e.g., \"Class\" vs \"class\"). The target repository at version 5.3.19 is NOT AFFECTED because the fix was already included in the upstream Spring Framework 5.3.19 release (commit a7cf19cec5ebd270f97a194d...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2022-22968"
      },
      "impact_statement": "not_affected \u2014 CVE-2022-22968 describes a case-sensitivity vulnerability in Spring Framework's DataBinder disallowedFields pattern matching, allowing attackers to bypass field restrictions using case variations (e.g., \"Class\" vs \"class\"). The target repository at version 5.3.19 is NOT AFFECTED because the fix was already included in the upstream Spring Framework 5.3.19 release (commit a7cf19cec5ebd270f97a194d..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-context@5.3.19-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-context@5.3.19-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-21T17:04:46.850342+00:00",
      "status_notes": "Vulnerability CVE-2024-38820 affects version 5.3.19-tuxcare.2 of org.springframework:spring-context.",
      "vulnerability": {
        "name": "CVE-2024-38820"
      },
      "action_statement": "Vulnerability CVE-2024-38820 affects version 5.3.19-tuxcare.2 of org.springframework:spring-context."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-context@5.3.19-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-context@5.3.19-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-21T17:04:46.850342+00:00",
      "status_notes": "Vulnerability CVE-2025-22233 affects version 5.3.19-tuxcare.2 of org.springframework:spring-context.",
      "vulnerability": {
        "name": "CVE-2025-22233"
      },
      "action_statement": "Vulnerability CVE-2025-22233 affects version 5.3.19-tuxcare.2 of org.springframework:spring-context."
    }
  ]
}