{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d78757d3-4801-592a-a43d-51f24c50793f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context-indexer", "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1", "version": "5.2.8.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0d8324de-855e-5c1f-b81d-932cc9e5555b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c9537bf7-cb13-5966-88ad-ccf759e4792f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4cf616dd-c15c-54af-818a-561e604c82e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7b421ecd-db96-5b4b-a3b0-6353d296af61", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:da6c2863-33b8-5424-a7d2-1d2ee662fec5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:47bdc29e-bec4-5d9b-969a-8de9e4691a3c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6f0f0d0f-ee39-5cc3-8c42-c10474ec0b5b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:28f8c9b0-9aa9-51ce-9415-4ae305a0a3ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ee6897de-26d0-5c6c-8561-1947b9f60b06", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:53a7022e-b246-5d2d-8e89-f8f5287e1d20", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:efa9220e-8661-573c-9edc-b1a524ecbe1a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d7c21335-de20-54de-ad08-03a2a02f5a0f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d0cd5481-d267-5b90-bea8-62ac9ff3dbc9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7698c932-800d-5df8-8ba3-ecba4a523db1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b55b5d11-d985-550c-b307-c71893b1f9fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7f312e73-1f17-579a-8713-015f8b563816", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:116ee9f8-450c-5e2b-be66-f13110ce016b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e1b2a26a-2251-51cd-9e30-07bd16cf1350", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2f14245d-a16d-5252-9351-739b9cca97fd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3d39a9af-2d09-5a37-b09c-f3013c787a32", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer. not_affected \u2014 Spring Framework 5.2.8.RELEASE is not affected by CVE-2024-38820. The vulnerability requires locale-dependent toLowerCase() usage in DataBinder's disallowedFields matching, a code pattern introduced by the CVE-2022-22968 fix in later versions (5.2.13+, 5.3.x+). Version 5.2.8.RELEASE (July 2020) predates that fix and uses case-sensitive direct matching without any toLowerCase() calls. The vulner...", "justification": "code_not_reachable" } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:05cf3f49-ce30-54d4-8cf7-6d81e5faf85e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d006cbbf-b0e3-5126-9f58-b99f997a2301", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b806d249-4997-5b70-92d4-86d97414a1f5", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer. not_affected \u2014 Version 5.2.8.RELEASE is not affected by CVE-2025-41234. The vulnerable code pattern (PRINTABLE BitSet without double-quote encoding) was introduced in version 6.0+ on Feb 1, 2023, approximately 2.5 years after 5.2.8.RELEASE was released (July 21, 2020). In 5.2.8, when using non-ASCII charsets, only the filename* parameter is output, and double-quotes are automatically percent-encoded because t...", "justification": "code_not_present" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5faa05f0-9546-5579-86e6-7b5fd79f70df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d099217d-7e2f-5079-afbf-32298971b235", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4c816976-3b02-5216-ab1f-5c8f3c333f12", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bb46ccb9-7f22-5290-8aa3-81c49b74867f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1056475d-1d8a-52c8-9eee-6579da34879b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e834a2ad-2ee6-526b-9f1f-5a71fab8c765", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:91d207fc-cc62-5b47-9ad0-b229852b1ffb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:701a99c7-8260-5719-9f30-20eb9542b373", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7682dc1b-8a34-5b80-a44d-c2b76d927bfe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d718dea0-ec7b-504a-bfd7-ca5c0e6e450e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2384ce9b-de8c-5cc8-a80a-d8d917428e2c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2e870f8b-e6c1-5a22-ab08-1368b638cf57", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9cb9fa78-b137-51f0-9c36-6af8c060fc02", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3746f689-4967-52ef-9e9c-e1311e20e474", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:960e1eb2-120e-59be-92a3-cd7877c4e862", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:49f35ca0-79ce-578c-97e3-114792d5b3f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0d0d84d1-c483-5a98-bc93-13895f9131e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9266d7b0-e27f-5ecb-a2eb-6cb566cad217", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f8b85674-63a2-59de-b36a-e35e9ccce9f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7c7f6efc-fcf0-50a9-8507-3713fa27f693", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e4777a8d-1d8e-53e3-b0c1-146f5ffd0f7f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a4f2b414-6ac7-57d8-aec8-59ebc8418f9f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:284ce908-831a-518f-ae1b-c1312adb31cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:44c8df16-6172-50f0-9280-873528da0922", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f099f385-d162-5855-8824-8cb275835b1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:38045c02-b18b-5f01-9147-9a0523db7e20", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9d9766dd-fade-53f0-ac22-8480ff211c23", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d5d77b15-eefa-5e70-9efd-e50cdd49647f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:46ad64fd-dfaa-534d-9212-fb044936687e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5d1f1cf4-31ec-5365-8843-572b94083e87", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8a07b54c-10d0-5898-9e04-342c80a16a9e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8a723593-1c57-541d-8697-93d316a3d67f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8d892426-6067-529a-8272-675ad4d00d87", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0ec28fda-02b0-5472-9d72-7b80be673b1f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9eaccbd0-7e83-5299-b9fd-cf2ce5cdf38c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fce45d98-19e8-5c58-bb20-ff229123d5ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:78ff0e68-81ae-5ab0-852b-96b1f711f9f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:98cbed74-ee75-5f7b-b596-8ab2fc89b064", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.8.RELEASE-tuxcare.1" } ] }