{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:688c34b0-ce67-59d1-8792-f023c5e5408d", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-instrument", "purl": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1", "version": "5.2.8.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9956a135-f9e2-5fc5-a7a5-312cd240d240", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:66c00d27-e82a-56be-985f-6b6e1c33e139", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:23aaa7a5-bcb3-51e7-94b3-e6215d33d2b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5dc5b5ea-a5f1-5b3d-8c0f-cd23407e7d89", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cb1f3cd6-8977-5fe4-a650-71b6d4cfbadf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bd13f1e1-e732-5898-85e5-f7db6be80762", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:96b693f1-7b36-5adb-91c5-8b813308a162", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f8905574-a06b-56ab-94cf-7fc336ba17ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e8ffaff1-d2df-5a9e-be23-56e16611a0db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f77690d7-b8c5-567f-8764-2c2bf63faed5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8299e392-9470-55f0-8798-621948de806c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6b49f752-84f5-5e1d-8854-33cd4a19b90e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e5d81b6c-e017-56bb-9e69-98915c49b88c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4882e66e-5286-5da3-be8a-de5a4e04b274", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bb86a370-bc5e-5c2b-9510-d35ae4f1463d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:050e797b-6468-59ba-8af7-1c15272b2da8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fe8ab2c0-e4b2-5eaa-aba6-5b8b3645315e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8a7394fe-2abc-518d-9edc-aea7dbf79c00", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bee6962a-1dcb-51fa-af3b-3afab100f8f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:39bbe4ff-a5f9-5326-a278-77644430a17a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument. not_affected \u2014 Spring Framework 5.2.8.RELEASE is not affected by CVE-2024-38820. The vulnerability requires locale-dependent toLowerCase() usage in DataBinder's disallowedFields matching, a code pattern introduced by the CVE-2022-22968 fix in later versions (5.2.13+, 5.3.x+). Version 5.2.8.RELEASE (July 2020) predates that fix and uses case-sensitive direct matching without any toLowerCase() calls. The vulner...", "justification": "code_not_reachable" } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3d9041e8-bf40-5744-96a2-06a47b59e2e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0f7cf633-5a58-5fbb-9325-3680d1f94785", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b0c2474e-c776-5266-819e-2c6c6c70f3b2", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument. not_affected \u2014 Version 5.2.8.RELEASE is not affected by CVE-2025-41234. The vulnerable code pattern (PRINTABLE BitSet without double-quote encoding) was introduced in version 6.0+ on Feb 1, 2023, approximately 2.5 years after 5.2.8.RELEASE was released (July 21, 2020). In 5.2.8, when using non-ASCII charsets, only the filename* parameter is output, and double-quotes are automatically percent-encoded because t...", "justification": "code_not_present" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d18b8fa4-ba0b-5bae-9a2a-f1f420dad20e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a3cca695-8ca7-5868-b7ff-9d72c71aed3f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0b19b491-0af6-5e08-a132-c2459fe3e47a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3a50824b-a4a8-5c49-9496-e5622584dd9f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6f962559-7edb-5e47-9dec-c50c5bc3a51f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:093ef713-2d4c-5016-b4c7-a8cc3ed3d06b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:13e7eb41-b486-52a2-b03c-cc5c696353ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:23a9976d-17cb-5ba9-92e8-eca93643ed98", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cad1ec5e-0e38-5515-8074-c550553ef224", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:05013bd1-c01e-5161-bea3-9ba926991909", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:06e806cc-ed3a-5acc-9f68-c1b8eee0c6e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7690587a-e522-510d-90c5-ee9cccda4af8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:40572fc3-972c-50d0-a746-59c3ec54bf96", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5b95a73a-5850-590f-8304-70c1b9541af4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:31a463fe-74ff-5c62-a192-df4ec7ea262a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:698943c0-5ffe-506b-b5df-1278162da363", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f22016ad-775b-5415-a123-3cf440d12d71", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:793eb2bb-709b-5eaa-903e-f7961673d031", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:69b11d9e-c5c5-564c-a979-2e7d82ae0915", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f4a72e1f-33ba-595f-9292-5b3f27eb6816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2eeafba8-e367-59d3-b43c-7bdcecad89c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e22db1b2-d1c0-5740-8aa4-b7a97bc4503c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:922bb922-71dd-5d5f-9865-40041668787a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:98e2390b-7d64-5fbd-bf2d-ee6943712839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:846e8b49-a807-53c5-b94c-2894f8310926", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2c301e93-7db0-5559-8984-4f818ffc766f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4a6aa60d-1af3-56ce-95af-b509ccdee20e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a9ca4188-e7d6-5276-87cf-53429898e3da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:98e5a992-da8b-5e83-a881-bf1447878488", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:82c4a966-d1f5-53fc-82d7-8157397c4a7f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1e6dcf61-ae53-5e6c-93c7-e44f83d79e72", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bfe5b571-c773-5174-ba7a-18adb8ecb943", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:aa4072c0-7233-5ae9-8fc2-c19720ff5945", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dd79db4a-e844-5060-afa8-ddcc02637d0f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ac78a3ff-9246-5f6f-a734-633ae7d30026", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9c749734-bc8d-51cf-bf96-18f0bf30468f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3bb0bd82-f24f-5516-beee-338932251219", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:52f3364e-d87d-538d-9863-357f578b9db0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.8.RELEASE-tuxcare.1" } ] }