{
  "@id": "urn:uuid:131365cb-418c-4a72-83c4-b827af1d4889",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 45,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-02T14:58:56.128088+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-context@5.3.25-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-context@5.3.25-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-31T00:57:54.648820+00:00",
      "status_notes": "Vulnerability CVE-2022-22968 does not affect version 5.3.25-tuxcare.2 of org.springframework:spring-context. not_affected \u2014 CVE-2022-22968 affects Spring Framework 5.3.0-5.3.18 due to case-sensitive disallowedFields pattern matching. The target version 5.3.25 is not affected because the fix was already present in the upstream release when TuxCare onboarded it. The current implementation uses PatternMatchUtils.simpleMatchIgnoreCase() which provides case-insensitive matching for disallowed field patterns, preventing t...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2022-22968"
      },
      "impact_statement": "not_affected \u2014 CVE-2022-22968 affects Spring Framework 5.3.0-5.3.18 due to case-sensitive disallowedFields pattern matching. The target version 5.3.25 is not affected because the fix was already present in the upstream release when TuxCare onboarded it. The current implementation uses PatternMatchUtils.simpleMatchIgnoreCase() which provides case-insensitive matching for disallowed field patterns, preventing t..."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-context@5.3.25-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-context@5.3.25-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2024-38820 is fixed in version 5.3.25-tuxcare.2 of org.springframework:spring-context.",
      "vulnerability": {
        "name": "CVE-2024-38820"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-context@5.3.25-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-context@5.3.25-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-22233 is fixed in version 5.3.25-tuxcare.2 of org.springframework:spring-context.",
      "vulnerability": {
        "name": "CVE-2025-22233"
      }
    }
  ]
}