{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:81915d67-3dae-5879-9ffe-8f3fc24b27b9", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-instrument", "purl": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1", "version": "5.2.9.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d921b341-3b96-576a-9faf-c82c8e690f83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7a2d53c8-9905-58db-a042-5b98a8453715", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:94bd86d5-a9ff-539e-80d1-97ec9d048aa5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e939f8e2-b929-5aed-96c7-120e3ac664ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:605c2950-e79b-5bcf-be81-2bd0886ab375", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c6ffeeae-6862-54af-bba0-2b7206180a81", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e484b445-bff9-5308-8b56-b62d9e7797ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fcb04286-0f74-57be-9752-266791bb861c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1bee90a7-abec-586a-bc89-7f234a13de24", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:75a1ba20-aa31-5cb9-9772-a43ee32d1db0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:334a58ab-3cb3-5885-8567-e231a2ce91bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:207b978c-c8be-5638-a299-6c173ac98e9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:55d11f39-385a-5dd0-83aa-6f50e1db922d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dc28acc6-122f-5b62-ba64-b3731a43686e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a14d8467-04fd-5ae4-9e18-d550065ffaa4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5f8e3725-3bcb-55ba-bfef-9b68ce9c0c10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bcb09b3a-9d0c-53a0-bb2d-080553b2dc12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e5c15c54-dfbd-5c41-b359-a6ead4eb9c62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a50227dc-b2ca-541f-8ce3-7a36e9a3f6eb", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument. not_affected \u2014 Spring Framework 5.2.9.RELEASE is not affected by CVE-2024-38820 because it lacks the vulnerable code pattern. CVE-2024-38820 fixes a locale-dependent case conversion bug in DataBinder's disallowedFields validation that was introduced by CVE-2022-22968. Version 5.2.9.RELEASE never received the CVE-2022-22968 fix, so it still uses case-SENSITIVE field matching (no toLowerCase calls) in DataBinde...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a72ee1fc-1053-546f-b17b-f5897bd2bbf2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4c5312b3-b8da-5340-83a2-87a156fdf67b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0525f6e4-5b21-596b-bdb9-14b232ae2ca5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3bd3c5f4-519a-5387-8679-cc4151278143", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d23b4f43-6956-5ece-9860-845b17099370", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:94ea69ee-dbde-5d90-b529-0bc9400070cb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1d384e0f-ed45-5093-85a3-46d3befa35c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cda221e5-f5e6-5a2b-ac87-c392b1394ad3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b252fd7b-f899-5338-9be0-281c8f0fb9b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d42026b9-364f-5009-ad27-b593562df959", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d72e85e0-b944-5a68-9393-d022ab35a30e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3817f629-a903-5b10-8323-995fb76a571e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4b1b1ad3-780c-5ea9-9151-4abbbab0bf72", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5eff61c3-c7fd-560e-b324-21f7d054dec8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e4cbf3ab-1bce-5cc8-9f85-19c9459ebda4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a8e26f0b-62ba-5204-9c94-1dbc7c3f8fa0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7bf82758-3204-5af0-9fff-8ab1d7751ad8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f4f73434-1340-538e-baf7-5956279b78ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2b13b573-8029-59d7-8f5c-19188166d2a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e5c1d236-6834-5247-b09b-5ae32c3f331e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f8a9294f-c266-5053-9b70-fc7a3b73a6f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d3de5799-6de5-5fe7-ad22-0427f2e55b03", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:64afd933-dabe-51d0-9dc0-0825db00613d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:14030f6d-6110-5b56-9921-d8fbadaa6150", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:48087044-d4bc-5bd8-800d-e58add1185ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:16cf0a2c-8e9f-5774-8b65-536dc1250da2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:595c2be4-4da1-5d44-be28-d28e47e790a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fde6a6c6-94d5-55b3-90bf-cafc13eb1379", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b434de0a-89f1-5ff8-96d4-f6f735228b95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ec7dbb23-d818-5dbf-9265-ac1886b6f769", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4a80e723-09bf-5b0e-b67a-a6660ec05ccd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c824056e-d83b-5a80-8618-29caa2ad5869", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:abe7a860-6553-5f6c-a92e-8c2c19e08b2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f42e58ab-50af-5c34-9489-add63d0f77ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:17f39c13-2a80-5ec2-91f0-64f876a88a4a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a53b66dd-7a1b-5386-ac0b-46718400de62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:18fb6afa-3bab-5989-9bc3-c4c47d1ca2d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f7b259b0-781c-56b0-a456-14a4fe2bf664", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:66912f75-aeaa-56b9-8684-9c83221bb671", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.9.RELEASE-tuxcare.1" } ] }