{
  "@id": "urn:uuid:9081315a-377f-4e23-a15d-8fc3de9aa211",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 47,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-02T14:58:56.128088+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-context@5.3.31-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-context@5.3.31-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-31T00:40:17.919955+00:00",
      "status_notes": "Vulnerability CVE-2022-22968 does not affect version 5.3.31-tuxcare.2 of org.springframework:spring-context. not_affected \u2014 CVE-2022-22968 is not present in Spring Framework 5.3.31. The vulnerability (case-sensitive matching for disallowedFields allowing bypass via case variation) was fixed in upstream Spring Framework 5.3.19 by commit a7cf19cec5ebd270f97a194d749e2d5701ad2ab7. Since the target version 5.3.31 is higher than the patched version 5.3.19, the fix was already present in the upstream release that TuxCare o...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2022-22968"
      },
      "impact_statement": "not_affected \u2014 CVE-2022-22968 is not present in Spring Framework 5.3.31. The vulnerability (case-sensitive matching for disallowedFields allowing bypass via case variation) was fixed in upstream Spring Framework 5.3.19 by commit a7cf19cec5ebd270f97a194d749e2d5701ad2ab7. Since the target version 5.3.31 is higher than the patched version 5.3.19, the fix was already present in the upstream release that TuxCare o..."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-context@5.3.31-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-context@5.3.31-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2024-38820 is fixed in version 5.3.31-tuxcare.2 of org.springframework:spring-context.",
      "vulnerability": {
        "name": "CVE-2024-38820"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-context@5.3.31-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-context@5.3.31-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-22233 is fixed in version 5.3.31-tuxcare.2 of org.springframework:spring-context.",
      "vulnerability": {
        "name": "CVE-2025-22233"
      }
    }
  ]
}