{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:50f8b6d5-f8e1-5c57-a9c9-554d5f4ffe13", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jcl", "purl": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1", "version": "5.2.8.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ff7db986-2d78-5cac-b885-6d823b7ebf2b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8fe06be8-06ea-52fe-bca2-ae5386eb4077", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6d050e5e-674b-546c-9087-a78083623e60", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:db2db3bc-ee6a-554d-8a67-b9280495f28f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:deff74a7-b464-51b4-a55e-73041b66fe5b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:82824708-736f-5a8d-9239-44e57a7fb688", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0b524d87-3ab3-5ccf-857d-93bbfd38aafa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9944376a-aefa-53f8-8553-38714dff7313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a94d50e1-2351-5a04-87b7-d7130e9704bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:54db4792-987b-5575-8fb7-fc9f1cfe3aae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e3bc5748-4b52-5635-909c-bf50506d05c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:03993402-c3ff-5b0b-b7f1-7ca362002c5a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bf095682-acb5-54cf-9002-de25d0144518", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3c7740c5-ff1f-501d-97d6-d2db41244495", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:afde6894-746e-52bc-b0fb-71dfea05adad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1c378a87-01db-57df-8744-801e4b28cc93", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fec1431e-adcc-575c-a77d-20b34b662fe0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e5373991-b081-51a8-95ec-9a4470312b32", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:becbb6f3-58d0-5bab-8e8f-effdff790727", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:63e5347a-4275-5aa9-9005-877a82a8f02f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl. not_affected \u2014 Spring Framework 5.2.8.RELEASE is not affected by CVE-2024-38820. The vulnerability requires locale-dependent toLowerCase() usage in DataBinder's disallowedFields matching, a code pattern introduced by the CVE-2022-22968 fix in later versions (5.2.13+, 5.3.x+). Version 5.2.8.RELEASE (July 2020) predates that fix and uses case-sensitive direct matching without any toLowerCase() calls. The vulner...", "justification": "code_not_reachable" } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9a2e3c83-b340-50d2-b505-10ecdb72b32c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ffce4c70-f427-5d26-b73f-a48222edd727", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fe9b1b92-c967-5e47-aad0-27dd3d979848", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl. not_affected \u2014 Version 5.2.8.RELEASE is not affected by CVE-2025-41234. The vulnerable code pattern (PRINTABLE BitSet without double-quote encoding) was introduced in version 6.0+ on Feb 1, 2023, approximately 2.5 years after 5.2.8.RELEASE was released (July 21, 2020). In 5.2.8, when using non-ASCII charsets, only the filename* parameter is output, and double-quotes are automatically percent-encoded because t...", "justification": "code_not_present" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:42857eca-81c4-50a4-96d3-28332b230a24", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:26eba5a8-5223-5300-a338-53888c7ac56d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:008109c8-795b-5cfc-897d-8e20ede32507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c11908d9-8607-5aed-9d9d-a8b4dd795576", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f94a4d3d-05e6-5a10-9ae7-b7f7b84c7dd6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a23ddcd6-ae74-5faf-85bc-b05cabc47b89", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:01bb373f-7af1-545f-b055-90f630e76b77", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d4055e30-5fe0-5238-b368-21413f62f1d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4b25dde5-1c10-5af6-9d49-f49a75169e5d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1d798e5d-802f-5b19-a6f9-f3be3bd533a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4fed5dc2-4cac-5991-8a43-c13b7b22c1c2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5e16d0dc-3235-574c-80dc-c6992b7866a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c997adf7-32ee-564b-b965-af658108408d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a91d9376-abbf-5b67-866d-661c1115701d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dec70fca-f21e-5003-b838-03808d25fb8e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5c978b0b-0b66-5bd5-8050-fa5c9e4eee7d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a9fd78ee-f6f3-5b4f-82a7-bc75458f8a84", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3a33453a-83ac-5002-86a2-f988904515b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cc015158-c98b-54fc-841d-1d7174879bbe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a520a152-d746-569e-99bb-b93d8b88be4d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a02905c1-34ca-5c29-82dc-1387458ec42a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:88343a0a-3585-5766-b060-baee6e12142c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:deff7df3-f7d6-5bde-ad86-10b128c94b45", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fd650e1b-42b1-520d-84e5-f11fdb900779", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4ee61dc3-9c8b-5f91-a068-7399763c17c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f733739e-744c-572c-8c1c-67caebd8a610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0c29fc05-780e-5b8a-9e95-10c47ddb7614", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bd2f458c-4ede-524b-94cc-8c7cabff6d64", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1e677b20-d538-5594-802f-5eddd118396b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:828076b0-a8dc-5c1c-a095-c87438f776b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:db74798e-f8d1-578d-9edf-c03f1c5f214f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f37def96-df29-593f-97f2-83f1c4d72067", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d587388e-7643-575b-9251-0198e360f974", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4ebe1943-2222-586d-9092-963733a88844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3a60c952-e29c-58cb-ac5a-e3869505ed58", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1a1763c0-26fc-5c3c-a891-a331ddc36329", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8a125904-0dfe-5d19-9f3f-4439e39587ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ce55a19b-2e96-55cf-a36c-6bf021320cd9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.8.RELEASE-tuxcare.1" } ] }